How do I add an SPF record at Cloudflare for Google Workspace?
Publish one SPF record at your domain in Cloudflare. If you already have one, add include:_spf.google.com inside it instead of adding a second.
Last read from the sources at the foot of this page.
- Type
- TXT
- Name
@- Value
v=spf1 include:_spf.google.com ~all
What does an SPF record do?
It lists the services allowed to send mail as your domain. A mail server reads it to decide whether a message really came from one of them.
What record do I publish for Google Workspace?
This is the record when Google Workspace is the only service that sends your mail. Google recommends ending with ~all for Google Workspace.
v=spf1 include:_spf.google.com ~allHow do I add it at Cloudflare?
- Sign in to Cloudflare and select your domain.
- Go to the DNS Records page.
- Select Add record and choose TXT as the Type.
- Set Name to @, which means the domain itself.
- Paste the record as the record's value.Leave out quotation marks: Cloudflare adds them.
- Select Save.
In our words, from Cloudflare: adding a TXT record, read 14 October 2026. If a screen has changed since, follow the host's own page.
What if I already have an SPF record?
Keep one record. Add include:_spf.google.com to the record you have, before its last word, and keep every service already in it. More than one SPF record makes the check fail for every message.
An SPF record may make at most 10 DNS lookups. Each include counts, and so do the includes inside it. Past 10, the check fails, so remove services you no longer use before adding new ones.
Where does this come from?
- Google Workspace: Set up SPFknowledge.workspace.google.comRead 14 October 2026
- Cloudflare: adding a TXT recorddevelopers.cloudflare.comRead 14 October 2026
- Cloudflare: Proxy statusdevelopers.cloudflare.comRead 14 October 2026
- RFC 7208, Sender Policy Framework (sections 4.5 and 4.6.4)rfc-editor.orgRead 14 October 2026
See what is open before anyone else does.
We read your domain from outside and show each way in with a check anyone can re-run.