Add an SPF record at STRATO

The SPF value for STRATO

If the domain sends exclusively through the STRATO mail servers, this record is enough. The include mechanism include:_spf.strato.com covers every STRATO sending server, -all rejects all other senders.

v=spf1 include:_spf.strato.com -all

When other services send as well

A newsletter tool, CRM, ticket system or Microsoft 365 alongside the STRATO mailboxes: every service goes into the same record as its own include. There must be only one TXT record with v=spf1; a second one invalidates both. At most ten DNS lookups are allowed, Google Workspace costs four, Microsoft 365 two, most newsletter tools one or two.

v=spf1 include:_spf.strato.com include:spf.protection.outlook.com include:spf.brevo.com -all

How to add the SPF record at STRATO

The way to the STRATO DNS editor:

• In the STRATO customer login open "Domains" and then "Domain administration".
• Choose "manage" next to the domain and switch to the "DNS settings" tab.
• STRATO separates by type: "TXT and CNAME records" for SPF, DKIM, DMARC and verifications, "MX records" for mail delivery.
• Type TXT, host name @ (at some hosts leave empty or pick the domain name), value: the full SPF record starting with v=spf1. If a TXT record with v=spf1 already exists, edit it rather than adding a second one.
• Enter the value and save; propagation can take up to an hour.
• For subdomain records such as _dmarc or selector._domainkey put the prefix into the "Subdomain" field, not into the value.

Typical mistakes at STRATO

• Two TXT records with v=spf1: both are ignored. Always edit the existing one.
• The record sits on www or a subdomain instead of the apex domain.
• Quotation marks typed into the value: the DNS editor adds them itself.
• More than ten lookups after adding further services.

Verify and keep an eye on it

After saving, the change at STRATO usually applies within minutes. The checker below queries the authoritative name servers and shows right away whether the SPF record is read correctly. DomainWarn keeps checking the record afterwards and alerts you when it changes or disappears, for example after a migration or one click too many in the DNS editor.

Frequently asked questions

Where do I find the SPF value in the STRATO control panel?

In the email settings of the domain; STRATO shows the recommended value there. If only STRATO sends, that value is enough.

How long until the SPF record takes effect?

At STRATO usually minutes, at the latest once the TTL of the old record has expired. Receivers query the record with every message.