'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Add SPF and TXT Records for a Domain Outside Microsoft 365
Question details
The user needs to configure SPF and TXT DNS records for a domain registered outside of Microsoft 365 to ensure emails are sent reliably without being flagged as spam.
- Product
- Microsoft 365 / Outlook
- Device & OS
- not provided
- Scenario
- Configuring email authentication (SPF/TXT) for a custom domain hosted by a third-party registrar to improve email delivery to providers like Gmail.
- Observed behavior
- The user needs to set up DNS records for email authentication but cannot access the Microsoft 365 Admin Center because they do not have a commercial business subscription.
Ensure you have the login credentials for your third-party domain registrar (e.g., WebCentral, GoDaddy) and the exact SPF TXT record values provided by your email service.
Add SPF and TXT Records via Your Domain Registrar
Use this method to configure your email authentication directly through your third-party domain host when you do not have Microsoft 365 Admin Center access.
If your domain is managed externally and you do not have a Microsoft 365 business subscription, you cannot use the Microsoft 365 Admin Center. Instead, all DNS management must be handled directly through your domain registrar's control panel.
Adding an SPF (Sender Policy Framework) record helps prevent spoofing and ensures that external email providers like Gmail accept your messages.
Navigate to the website of the company where you purchased your domain (e.g., WebCentral, GoDaddy, Namecheap) and log in to your account.
Find the settings area labeled 'DNS Management', 'Advanced DNS', 'Name Server Settings', or 'Domain Control Panel'.
Click 'Add Record' and select 'TXT' as the record type. In the 'Host' or 'Name' field, enter '@' (which represents your root domain).
In the 'Value' or 'Text' field, paste the SPF record provided by your email host (for example, 'v=spf1 include:spf.protection.outlook.com -all').
Click 'Save' or 'Add Record'. Note that DNS changes may take anywhere from a few minutes to 48 hours to fully propagate across the internet.
Verify Microsoft 365 Subscription Requirements for Admin Center
Clarify why the Microsoft 365 Admin Center is inaccessible and confirm if DNS must be managed externally.
Discover WPS Office: A Powerful Microsoft Alternative
While configuring domain records requires your DNS provider, managing your daily documents, spreadsheets, and presentations shouldn't be complicated. WPS Office offers a free, lightweight, and highly compatible suite for all your productivity needs.
- 1. Download and Install: Visit the official WPS website to download the free WPS Office suite for your device.
- 2. Open and Create: Launch WPS Office to easily create or open existing Word, Excel, or PowerPoint files without formatting issues.
- 3. Save and Export: Save your documents in standard Microsoft formats or export them directly as PDFs for easy sharing.
Frequently Asked Questions
What is an SPF record and why do I need it?
An SPF (Sender Policy Framework) record is a type of DNS TXT record that identifies which mail servers are authorized to send email on behalf of your domain. It helps prevent spammers from sending unauthorized emails from your domain, ensuring your legitimate emails are delivered to providers like Gmail without being marked as spam.
How long does it take for SPF and TXT records to update?
DNS changes, including SPF and TXT records, typically take between 15 minutes to 48 hours to fully propagate across the global internet. The exact time depends on your DNS provider's Time to Live (TTL) settings.
Why can't I access the Microsoft 365 Admin Center with my Outlook Premium account?
The Microsoft 365 Admin Center requires an eligible commercial Business or Enterprise subscription. Personal, Family, or ad-free Outlook subscriptions do not include administrator privileges or access to the Admin Center.
Can I have multiple SPF records for one domain?
No, a single domain can only have one SPF record. Having multiple SPF records will cause email authentication to fail. If you use multiple email services, you must merge their configurations into a single SPF record using the 'include' mechanism.
