How do I fix an SPF fail when using Hover and Netlify?

Summary

To resolve SPF failures with Hover and Netlify, ensure you have a single TXT record containing your SPF configuration. This record should start with `v=spf1` and include all authorized sending sources. For Hover, use `include:_spf.hostedemail.com` instead of `include:hover.com`. Verify the syntax, and use SPF testing tools like MXToolbox to check for errors. When using Netlify DNS or Cloudflare, ensure their configurations are correct. Be mindful of the 10 DNS lookup limit, and use `ip4` and `ip6` mechanisms where possible. Allow up to 48 hours for DNS propagation. Understand the difference between softfail and hardfail, and configure the appropriate qualifier at the end of your SPF record.

Key findings

  • Single TXT Record: Use only one SPF record, configured as a TXT record, to avoid conflicts.
  • Correct Syntax: Ensure the SPF record starts with `v=spf1`.
  • Authorized Sources: Include all authorized sending sources, such as Hover and Netlify.
  • Testing Tools: Use SPF testing tools to check for errors.
  • DNS Propagation: Allow up to 48 hours for DNS changes to propagate.

Key considerations

  • Hover Include: Use `include:_spf.hostedemail.com` instead of `include:hover.com`.
  • Third-Party Services: Include SPF records for all third-party services sending emails on your behalf.
  • DNS Lookup Limit: Keep the number of DNS lookups below 10 to avoid SPF failures.
  • Netlify/Cloudflare: Ensure correct configuration when using Netlify DNS or Cloudflare.
  • Softfail/Hardfail: Understand and configure softfail (~all) and hardfail (-all) appropriately.

What email marketers say
12Marketer opinions

To resolve SPF failures when using Hover and Netlify, ensure your SPF record is a single TXT record with correct syntax (v=spf1...). Include necessary services like Hover's `_spf.hostedemail.com` (avoiding the corporate `hover.com` include), and any other third-party senders. Use online SPF testing tools to check for errors, and allow up to 48 hours for DNS propagation. Be aware of the difference between softfail and hardfail settings. When using services like Netlify DNS or Cloudflare, verify their specific configurations.

Key opinions

  • Single TXT Record: Ensure only one SPF record exists as a TXT record to avoid conflicts.
  • Correct Syntax: Verify the SPF record's syntax is correct (v=spf1...) to prevent errors.
  • Essential Includes: Include only necessary services, such as `_spf.hostedemail.com` for Hover.
  • Testing Tools: Use online SPF testing tools to diagnose issues like syntax errors.
  • DNS Propagation: Allow up to 48 hours for DNS changes to propagate fully.

Key considerations

  • Hover Includes: Avoid using the `include:hover.com` directive, as it may include unnecessary corporate entries.
  • Third-Party Services: If using third-party email services, include their SPF records in your DNS settings.
  • Softfail vs Hardfail: Understand the implications of using softfail (~all) versus hardfail (-all) in your SPF record.
  • Netlify DNS: If using Netlify DNS, ensure the SPF record is correctly configured within Netlify's settings.
  • Cloudflare Settings: If using Cloudflare, verify that DNS records are properly configured to avoid interference with SPF.
Marketer view

Email marketer from Email Geeks suggests not to `include:hover.com` as it adds corporate includes that are likely unnecessary, recommending that the first include `include:_spf.hostedemail.com` should be sufficient.

September 2023 - Email Geeks
Marketer view

Email marketer from Reddit shares that SPF records must be entered as TXT records in your DNS settings. Ensure the syntax is correct (v=spf1...) and includes all services sending emails on your behalf (e.g., include:sendgrid.net).

May 2024 - Reddit
Marketer view

Email marketer from Email Deliverability Blog answers that understand the difference between softfail (~all) and hardfail (-all) in your SPF record. Hardfail can cause deliverability issues if not properly configured.

July 2022 - Email Deliverability Blog
Marketer view

Email marketer from DNSimple answers that after updating your SPF record, allow time for DNS propagation. It can take up to 48 hours for changes to take effect.

September 2024 - DNSimple
Marketer view

Email marketer from Stack Overflow answers that common SPF failures are often due to incorrect syntax or missing include statements. Double-check your SPF record for typos and ensure all sending services are included.

February 2023 - Stack Overflow
Marketer view

Email marketer from EmailGeeks Forum answers that for Hover, ensure you include the correct SPF include statement provided by Hover in your record to authorize their sending servers.

February 2023 - EmailGeeks Forum
Marketer view

Email marketer from Web Hosting Forum answers that using online SPF record testing tools can help diagnose issues. These tools check for syntax errors, DNS lookup limits, and other common problems.

September 2022 - Web Hosting Forum
Marketer view

Email marketer from Email Service Support answers that if you're using a third-party email service, make sure to include their SPF record in your DNS settings. Check their documentation for the correct include statement.

June 2021 - Email Service Support
Marketer view

Email marketer from Netlify Community answers that when using Netlify DNS, ensure your SPF record is correctly configured in the Netlify DNS settings. Verify that the record is active and properly propagated.

May 2023 - Netlify Community
Marketer view

Email marketer from Email Geeks shares a link to Hover's help documentation and notes that it doesn't reference `include:hover.com` and agrees that it is corporate and not customer facing, recommending `include:_spf.hostedemail.com`.

April 2022 - Email Geeks
Marketer view

Email marketer from Webmaster Forum answers that having multiple SPF records can cause issues. Combine all SPF records into a single TXT record to avoid conflicts.

October 2024 - Webmaster Forum
Marketer view

Email marketer from Cloudflare Community answers that If you're using Cloudflare, make sure that your DNS records are properly configured and proxied. Incorrect Cloudflare settings can sometimes interfere with SPF records.

June 2023 - Cloudflare Community

What the experts say
3Expert opinions

To fix SPF failures with Hover and Netlify, ensure you are using a TXT record instead of an SPF record (as SPF records are obsolete). Verify that the correct `include` mechanisms for both Hover and Netlify are present and resolve correctly. Also, optimize your SPF record to stay within the 10 DNS lookup limit and avoid deprecated mechanisms by minimizing includes and ensuring only legitimate sending sources are included.

Key opinions

  • TXT Record: Use TXT records instead of SPF records.
  • Correct Includes: Include the correct mechanisms for Hover and Netlify.
  • Resolving Includes: Ensure includes resolve to authorized sending IPs.

Key considerations

  • DNS Lookup Limit: Optimize to stay within the 10 DNS lookup limit.
  • Deprecated Mechanisms: Avoid using deprecated SPF mechanisms.
  • Source Verification: Ensure only legitimate sending sources are included.
Expert view

Expert from Email Geeks explains that SPF records are obsolete and not used, suggesting the use of a TXT record with the same content instead.

April 2021 - Email Geeks
Expert view

Expert from Word to the Wise explains that common SPF misconfigurations include exceeding the 10 DNS lookup limit and using deprecated mechanisms. To fix SPF fails with Hover and Netlify, optimize your SPF record by minimizing the number of includes and ensuring there are no unnecessary lookups, while still covering all legitimate sending sources.

January 2025 - Word to the Wise
Expert view

Expert from Spamresource explains that SPF includes are used to delegate SPF authorization to another domain. When using Hover and Netlify, ensure that the correct `include` mechanisms for both services are present in your SPF record, and that these include statements resolve correctly to authorized sending IPs.

October 2024 - Spamresource

What the documentation says
5Technical articles

To resolve SPF failures with Hover and Netlify, it is important to create SPF records as TXT records in your DNS zone file. The record should start with `v=spf1` and include all authorized sending sources using mechanisms like `include`, `a`, `mx`, `ip4`, and `ip6`. Ensure the record is correctly formatted to avoid authentication failures. Use tools like MXToolbox to check for syntax errors and other common problems. Keep the total number of DNS lookups below 10 to prevent SPF from failing.

Key findings

  • TXT Record Type: SPF records must be created as TXT records in the DNS zone file.
  • Correct Syntax: The record should start with `v=spf1`.
  • Authorized Sources: Include all authorized sending sources using mechanisms like `include`, `a`, `mx`, `ip4`, and `ip6`.
  • Lookup Limit: SPF records have a limit of 10 DNS lookups.

Key considerations

  • Error Checking: Use tools like MXToolbox to check for syntax errors and other common problems.
  • Mechanism Usage: Use `include` statements wisely and consider `ip4` and `ip6` mechanisms where possible to stay within the lookup limit.
  • Qualifier Ending: End with a qualifier such as `~all` or `-all` to specify how receivers should handle messages that fail SPF checks.
Technical article

Documentation from RFC answers that SPF records have a limit of 10 DNS lookups. Exceeding this limit can cause SPF to fail. Use `include` statements wisely and consider using `ip4` and `ip6` mechanisms where possible.

August 2021 - RFC Documentation
Technical article

Documentation from Google Workspace Admin Help answers that SPF records should begin with `v=spf1` and include mechanisms like `include`, `a`, `mx`, `ip4`, and `ip6` to specify authorized sending sources. End with a qualifier such as `~all` or `-all`.

April 2023 - Google Workspace Admin Help
Technical article

Documentation from MXToolbox explains using tools like MXToolbox to check your SPF record for errors. These tools can help identify syntax issues, missing includes, and other common problems.

September 2021 - MXToolbox
Technical article

Documentation from Netlify Docs explains that SPF records should be created as TXT records and include all authorized sending sources for your domain. It is crucial to ensure the SPF record is correctly formatted to avoid authentication failures.

February 2024 - Netlify Docs
Technical article

Documentation from Hover Help answers that to create an SPF record, add a TXT record to your DNS zone file. The value should start with 'v=spf1' followed by include statements for each sending service. Verify the syntax to avoid errors.

May 2023 - Hover Help