--- title: "SPF Record Examples: Copy-Paste Records for Google, Microsoft 365, SendGrid & More (2026) | AutoSPF" description: "Copy-paste SPF TXT records for the 10 most common email vendor combinations. Each example shows the exact DNS record, the lookup count, and what to watch out for." image: "https://autospf.com/og/blog/spf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026.png" canonical: "https://autospf.com/blog/spf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026/" --- Quick Answer An SPF record for Google Workspace is v=spf1 include:\_spf.google.com -all (4 lookups). For Microsoft 365 it is v=spf1 include:spf.protection.outlook.com -all (2 lookups). For Google + SendGrid combined it is v=spf1 include:\_spf.google.com include:sendgrid.net -all (9 lookups). Each include consumes DNS lookups from the RFC 7208 limit of 10 - this guide shows the exact record, lookup count, and flattening guidance for the 10 most common vendor combinations. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fspf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=SPF%20Record%20Examples%3A%20Copy-Paste%20Records%20for%20Google%2C%20Microsoft%20365%2C%20SendGrid%20%26%20More%20%282026%29&url=https%3A%2F%2Fautospf.com%2Fblog%2Fspf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fspf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fspf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026%2F&title=SPF%20Record%20Examples%3A%20Copy-Paste%20Records%20for%20Google%2C%20Microsoft%20365%2C%20SendGrid%20%26%20More%20%282026%29 "Share on Reddit") [ ](mailto:?subject=SPF%20Record%20Examples%3A%20Copy-Paste%20Records%20for%20Google%2C%20Microsoft%20365%2C%20SendGrid%20%26%20More%20%282026%29&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fspf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026%2F "Share via Email") ![SPF record examples for common email providers](https://media.mailhop.org/autospf/images/2023/06/spf-record-checker-8136.jpg) **Every SPF record listed below is copy-paste ready - publish it as a single DNS TXT record at your domain apex.** Each example shows the exact record string, the DNS lookup count it consumes from the [RFC 7208](https://datatracker.ietf.org/doc/html/rfc7208) limit of 10, and what to watch out for. If your combination isn’t listed, the rules at the bottom show how to build your own. These records are current as of April 2026\. Vendor include chains change when providers add or retire sending infrastructure - if you need a record that auto-updates when vendors change their IPs, that is exactly what [AutoSPF’s flattening service](/) does. ## What Is the Correct SPF Record for Google Workspace? **Copy-paste record:** ``` v=spf1 include:_spf.google.com -all ``` **DNS lookups used:** 4 of 10 Google’s `_spf.google.com` include chains to three `_netblocks` records internally (`_netblocks.google.com`, `_netblocks2.google.com`, `_netblocks3.google.com`), each of which consumes one additional lookup. Total: 1 (the top-level include) + 3 (netblocks) = 4 lookups. Per [Google’s sender guidelines](https://support.google.com/a/answer/10684623), this single include covers Gmail, Google Groups, and Calendar notifications. **Watch out for:** Google’s include alone uses 4 of your 10 lookups, leaving only 6 for all other senders. If you also use SendGrid (5 lookups), the combined total is 9 - one more sender and you hit the wall. ## What Is the Correct SPF Record for Microsoft 365? **Copy-paste record:** ``` v=spf1 include:spf.protection.outlook.com -all ``` **DNS lookups used:** 2 of 10 Microsoft 365’s include is lighter than Google’s - it chains to one nested include, consuming 2 total lookups. This is per [Microsoft’s SPF configuration documentation](https://learn.microsoft.com/en-us/defender-office-365/email-authentication-spf-configure). **Watch out for:** If you use Exchange hybrid (on-premises + cloud), you may also need `ip4:` entries for your on-premises mail servers. Those don’t consume lookups. ## What Is the Correct SPF Record for Google Workspace + SendGrid? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:sendgrid.net -all ``` **DNS lookups used:** 9 of 10 This is the most common combination that pushes organizations dangerously close to the 10-lookup limit. Google uses 4 lookups, SendGrid uses approximately 5 (its include chains to multiple regional sending infrastructure records). Total: 9\. Adding even one more `include`, `a`, or `mx` mechanism will exceed the limit and trigger a `PermError`. **Watch out for:** If you need to add any other sender (Mailchimp, Salesforce, HubSpot, a support desk), you will exceed 10 lookups. The fix is either SPF flattening (replacing includes with resolved IP addresses) or SPF macros (delegating resolution to a per-query lookup). [AutoSPF handles both approaches](/). ## What Is the Correct SPF Record for Microsoft 365 + SendGrid? **Copy-paste record:** ``` v=spf1 include:spf.protection.outlook.com include:sendgrid.net -all ``` **DNS lookups used:** 7 of 10 Microsoft (2) + SendGrid (5) = 7\. Safer than Google + SendGrid but still leaves only 3 lookups for other senders. ## What Is the Correct SPF Record for Google Workspace + Microsoft 365? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:spf.protection.outlook.com -all ``` **DNS lookups used:** 6 of 10 This combination is common during migrations from one platform to the other, or when an organization uses Google for corporate email and Microsoft for specific legacy applications. Google (4) + Microsoft (2) = 6 lookups. ## What Is the Correct SPF Record for Google Workspace + Mailchimp? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:servers.mcsv.net -all ``` **DNS lookups used:** 5 of 10 Mailchimp’s include (`servers.mcsv.net`) is lightweight - typically 1 lookup. Combined with Google’s 4, total is 5\. Plenty of headroom for additional senders. ## What Is the Correct SPF Record for Microsoft 365 + Mailchimp + HubSpot? **Copy-paste record:** ``` v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.hubspot.com -all ``` **DNS lookups used:** 5 of 10 Microsoft (2) + Mailchimp (1) + HubSpot (2) = 5 lookups. A comfortable budget with room for 5 more lookups. ## What Is the Correct SPF Record for Google Workspace + Salesforce? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:_spf.salesforce.com -all ``` **DNS lookups used:** 6 of 10 Salesforce’s `_spf.salesforce.com` typically uses 2 lookups. Combined with Google (4), total is 6. ## What Is the Correct SPF Record for Google + Microsoft 365 + SendGrid + Mailchimp? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:sendgrid.net include:servers.mcsv.net -all ``` **DNS lookups used:** 12 of 10 - **EXCEEDS THE LIMIT** This is the exact scenario where SPF breaks. Google (4) + Microsoft (2) + SendGrid (5) + Mailchimp (1) = 12 lookups. [RFC 7208 §4.6.4](https://datatracker.ietf.org/doc/html/rfc7208#section-4.6.4) caps evaluation at 10\. The receiving mail server returns a `PermError` and every message from the domain fails SPF authentication, regardless of which sender it comes from. **The fix:** Use [AutoSPF](/) to flatten the includes into resolved IP addresses or switch to SPF macros. Flattening replaces the `include:` mechanisms with `ip4:` and `ip6:` entries that consume zero lookups, bringing the total back under 10\. AutoSPF monitors the upstream vendors’ IP ranges and re-flattens automatically when they change - typically every 15 minutes. ## What Is the Correct SPF Record for Google + Brevo (Sendinblue)? **Copy-paste record:** ``` v=spf1 include:_spf.google.com include:spf.brevo.com -all ``` **DNS lookups used:** 6 of 10 Brevo’s include (`spf.brevo.com`) typically uses 2 lookups. Combined with Google (4), total is 6\. Remember that Brevo also requires two DKIM CNAME records (`mail._domainkey` and `mail2._domainkey`) - SPF alone is not sufficient for full authentication per Google’s and Yahoo’s February 2024 bulk sender requirements. ## How Do You Build Your Own SPF Record? If your vendor combination isn’t listed above, follow these rules: 1. **Start with `v=spf1`** \- this is required and must be first. 2. **Add `ip4:` and `ip6:` entries** for any static IPs that send mail (e.g., your on-premises mail server). These consume **0 lookups**. 3. **Add `include:` entries** for each third-party email service. Check the service’s documentation for the exact include string. Each include consumes **1 lookup** plus whatever nested lookups the included record contains. 4. **End with `-all`** (hard fail) or `~all` (soft fail). Use `-all` in production; use `~all` only during initial testing. 5. **Count your total lookups.** Add up: 1 per `include`, 1 per `a` mechanism, 1 per `mx` mechanism, 1 per `exists`, and 1 per `redirect`. Include nested lookups inside each vendor’s include chain (use our [free SPF checker](/tools/spf-checker/) to count automatically). The total must be ≤ 10. 6. **Publish as a single TXT record** at the domain apex (e.g., `example.com`). You can only have **one** SPF record per domain - [RFC 7208 §3.2](https://datatracker.ietf.org/doc/html/rfc7208#section-3.2) treats multiple records as a `PermError`. ## What Are the Most Common DNS Lookup Costs by Vendor? | Vendor | Include mechanism | Approximate lookups | | ------------------ | ---------------------------------- | ------------------- | | Google Workspace | include:\_spf.google.com | 4 | | Microsoft 365 | include:spf.protection.outlook.com | 2 | | SendGrid | include:sendgrid.net | 5 | | Mailchimp | include:servers.mcsv.net | 1 | | Amazon SES | include:amazonses.com | 2 | | Salesforce | include:\_spf.salesforce.com | 2 | | HubSpot | include:spf.hubspot.com | 2 | | Brevo (Sendinblue) | include:spf.brevo.com | 2 | | Mailgun | include:mailgun.org | 2 | | Mimecast (US) | include:\_netblocks.mimecast.com | 2-4 | | Proofpoint | include:\_spf.pphosted.com | 2-4 | | Zoho Mail | include:zoho.com | 2 | | Postmark | include:spf.mtasv.net | 1 | | SparkPost | include:sparkpostmail.com | 1 | _Lookup counts are approximate and may change when vendors update their sending infrastructure. Use the [AutoSPF SPF checker](/tools/spf-checker/) to get the current live count for any domain._ ## What Happens When You Exceed 10 DNS Lookups? Per [RFC 7208 §4.6.4](https://datatracker.ietf.org/doc/html/rfc7208#section-4.6.4), if the total number of DNS mechanism lookups exceeds 10 during SPF evaluation, the check immediately returns a `PermError`. This is a **permanent, unrecoverable failure** \- it does not matter whether the sending IP would have been authorized further down the record. Every message from the domain fails SPF. The practical consequence: legitimate email from the domain is rejected or sent to spam by receivers that enforce SPF strictly (Gmail, Outlook.com, Yahoo). According to the [FBI’s 2022 Internet Crime Report (IC3)](https://www.ic3.gov/Media/PDF/AnnualReport/2022%5FIC3Report.pdf), Business Email Compromise caused $2.7 billion in losses in a single year - but a broken SPF record due to exceeding 10 lookups can make the problem worse by suppressing legitimate messages while doing nothing to stop attackers who spoof the domain without using its real SPF record. **The fix is SPF flattening or SPF macros.** [AutoSPF](/) resolves include chains into static IP addresses (consuming 0 lookups each) and re-scans upstream vendors every 15 minutes to keep the flattened record current. For domains that need unlimited includes, AutoSPF also supports SPF macros, which delegate per-query resolution and bypass the 10-lookup limit entirely. ## Related Reading - [best SPF checker tools](/blog/best-spf-checker-tools-free-2026/) - [SPF too many DNS lookups - how to fix it](/spf-too-many-dns-lookups/) - [SPF flattening tools](/blog/best-spf-flattening-tools-in-2026-the-complete-guide/) ## Topics [ SPF ](/tags/spf/)[ SPF record ](/tags/spf-record/)[ email security ](/tags/email-security/)[ SPF Flattening ](/tags/spf-flattening/)[ DKIM ](/tags/dkim/)[ DMARC ](/tags/dmarc/) ![Adam Lundrigan](https://media.mailhop.org/autospf/images/authors/adam-lundrigan.jpg) [ Adam Lundrigan ](/authors/adam-lundrigan/) CTO CTO of DuoCircle. Architect of AutoSPF's SPF flattening engine and DNS monitoring infrastructure. [LinkedIn Profile →](https://www.linkedin.com/in/adamlundrigan/) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) ## Related Articles [ Foundational 14m How To Create And Check Your Domain SPF Record Online Easily Sep 2, 2025 ](/blog/how-to-create-and-check-domain-spf-record-online-easily/)[ Foundational 16m SPF Protocol Explained: Boosting Your Email Deliverability And Security Oct 28, 2025 ](/blog/spf-protocol-explained-boosting-your-email-deliverability-and-security/)[ Foundational 14m Common SPF Record Problems And How You Can Fix Them Today Aug 28, 2025 ](/blog/common-spf-record-problems-and-how-you-can-fix-them-today/)[ Foundational 16m DreamHost SPF Record: A Step-by-Step Email Setup Guide May 14, 2025 ](/blog/dreamhost-spf-record-a-step-by-step-email-setup-guide/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"SPF Record Examples: Copy-Paste Records for Google, Microsoft 365, SendGrid & More (2026)","description":"Copy-paste SPF TXT records for the 10 most common email vendor combinations. Each example shows the exact DNS record, the lookup count, and what to watch out for.","url":"https://autospf.com/blog/spf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026/","datePublished":"2026-03-24T00:00:00.000Z","dateModified":"2026-04-18T02:36:41.000Z","dateCreated":"2026-03-24T00:00:00.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/adam-lundrigan/#person","name":"Adam Lundrigan","url":"https://autospf.com/authors/adam-lundrigan/","jobTitle":"CTO","description":"Adam Lundrigan is the Chief Technology Officer of DuoCircle, where he leads engineering and is responsible for the architecture of AutoSPF's SPF flattening engine and DNS monitoring infrastructure. His technical focus is the DNS-level behavior of SPF evaluation, the recursive include resolution logic that underpins flattening, and the monitoring systems that keep customer SPF records healthy as their upstream vendors change IP ranges.","image":"https://media.mailhop.org/autospf/images/authors/adam-lundrigan.jpg","knowsAbout":["SPF Flattening","DNS Architecture","Recursive Include Resolution","SaaS Engineering","DNS Monitoring","Infrastructure Automation"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/adamlundrigan/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/spf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026/"},"articleSection":"foundational","keywords":"SPF, SPF record, email security, SPF Flattening, DKIM, DMARC","wordCount":2200,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/images/2023/06/spf-record-checker-8136.jpg","caption":"SPF record examples for common email providers","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://autospf.com/foundational/"},{"@type":"ListItem","position":4,"name":"SPF Record Examples: Copy-Paste Records for Google, Microsoft 365, SendGrid & More (2026)","item":"https://autospf.com/blog/spf-record-examples-copy-paste-for-google-microsoft-sendgrid-2026/"}]} ```