SPF record missing

Check id: spf.missing · fix effort: low

What it means

Your domain has no SPF record, so it never says which mail servers are allowed to send as you. Scammers can spoof your address and your real mail is more likely to hit spam folders.

The technical detail

No v=spf1 TXT at the apex. Receivers can't authenticate your sending sources, and DMARC loses one of its two inputs.

How to fix it

1. List every service that sends mail as your domain (mail provider, CRM, newsletter tool).
2. Publish a TXT record at the apex, e.g. v=spf1 include:_spf.google.com -all (Google Workspace) or v=spf1 include:spf.protection.outlook.com -all (Microsoft 365).
3. If the domain never sends mail, publish v=spf1 -all to lock it down.
4. Rescan to confirm the record is live.