How to set up SPF on Porkbun

Add an SPF record in your Porkbun DNS so the world knows which servers may send email using your domain.

Why this matters to your business

SPF (Sender Policy Framework) is a short note in your domain’s DNS that lists which mail servers are allowed to send email “from” your domain. Without it, scammers can forge your address to send invoices, payment requests or fake quotes to your customers and suppliers — and your own legitimate email is more likely to land in spam. Setting SPF up is free, takes a few minutes, and is one of the strongest, cheapest things you can do to protect your name and keep your email getting delivered.

Before you start: is Porkbun actually running your DNS?

This is the single most common reason these changes “do nothing.” A DNS record only takes effect if Porkbun is where your domain’s nameservers point.

If you registered the domain at Porkbun and left the nameservers as they came, Porkbun is running your DNS — you’re in the right place.
If you point your domain at someone else’s nameservers (for example Cloudflare, a web host, or your email provider), then the SPF record must be added there, not at Porkbun. Adding it at Porkbun will have no effect.

In your Porkbun account, open the domain and check the Authoritative Nameservers section. If it shows Porkbun’s own nameservers (such as the curitiba/fortaleza/maceio/salvador set), continue below. If it shows another company’s nameservers, go add SPF in that company’s DNS instead.

What you’ll add

A single TXT record that lists your senders. The exact value depends on who sends your email. A common example for a domain that sends only through Microsoft 365 is:

v=spf1 include:spf.protection.outlook.com -all

For Google Workspace it’s usually:

v=spf1 include:_spf.google.com ~all

Use the SPF value your email provider tells you to use. You should have only one SPF (TXT starting with v=spf1) record per domain — if you already have one, edit that one rather than adding a second.

Steps in Porkbun

Sign in to Porkbun and open Account → Domain Management.
Find your domain and click the Details arrow, then choose DNS Records (the Edit / DNS editor).
Review the existing records. If an SPF (TXT starting with v=spf1) record is already present, edit that one rather than adding a second.
To add a record, set Type to TXT.
Leave the Host field blank to apply the record to the domain itself. (Porkbun treats an empty Host as the root domain — you do not type @ here.)
In the Answer (the value) field, paste your SPF string, e.g. v=spf1 include:spf.protection.outlook.com -all.
Leave TTL at the default (600 is fine).
Click Add (or Save).

Porkbun quirks people get wrong

Leave Host blank for the root, don’t type @. Porkbun uses an empty Host field to mean the domain itself. Typing @ here creates a record at the literal name @, which is wrong.
No quotes. Type the SPF value plain in the Answer field. Do not wrap it in double quotes — Porkbun stores it correctly without them, and adding quotes can break the record.
Only one SPF record. Two v=spf1 records is an error and breaks SPF entirely. If you add a second sender (say you start using a newsletter tool as well), combine them into one record using extra include: entries — don’t create a second TXT.
Changes aren’t instant. DNS can take from a few minutes up to a couple of hours to update everywhere.

Verify it worked

Once saved, confirm the record is live and correct with the free check on Defaults.Exposed. Enter your domain and it’ll tell you in plain language whether your SPF is set up properly. Your data is processed in the EU.

Done? Check your domain free to confirm it worked — and see your full grade across all 34 checks.