Fix guide

SPF record or alignment issue

How to confirm SPF is authorizing the sender path and aligning with the visible sender identity.

Warning

Why this matters

SPF authorizes the servers allowed to send for a domain. For DMARC, the passing SPF domain must also align with the visible From domain.

A message can show spf=pass and still fail alignment if the return-path domain belongs to another provider or subdomain.

How to fix it

Add the sending provider's include mechanism or sending IP to the SPF record for the correct domain. Keep the record under the DNS lookup limit.

If alignment is the issue, configure a custom return-path or bounce domain in the sending platform and rerun the test.