--- title: "How To Configure InfusionMail SPF Records For Your Domain | DMARC Report" description: "Learn how to configure InfusionMail SPF records, authorize legitimate senders, prevent SPF errors, and improve email authentication and deliverability." image: "https://dmarcreport.com/og/blog/how-to-configure-infusionmail-spf-records-for-your-domain.png" canonical: "https://dmarcreport.com/blog/how-to-configure-infusionmail-spf-records-for-your-domain/" --- Quick Answer InfusionMail SPF records help authorize approved mail servers to send emails for your domain. Add the correct SPF mechanism to your DNS TXT record, verify the configuration, and monitor SPF results to support email authentication and deliverability. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20To%20Configure%20InfusionMail%20SPF%20Records%20For%20Your%20Domain&url=undefined%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F&title=How%20To%20Configure%20InfusionMail%20SPF%20Records%20For%20Your%20Domain "Share on Reddit") [ ](mailto:?subject=How%20To%20Configure%20InfusionMail%20SPF%20Records%20For%20Your%20Domain&body=Check out this article: undefined%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F "Share via Email") ![InfusionMail SPF Records](https://media.mailhop.org/dmarcreport/dmarc-check-5209-1790330140123.jpg) Configuring an InfusionMail SPF record is one of the most important steps in improving email authentication for messages sent through Infusionsoft, now known as Keap. When you authorize Keap to send email on **behalf of your domain**, mailbox providers such as Google Mail, Microsoft, and Yahoo can better distinguish legitimate email sending from email spoofing, spam emails, and unauthorized [mail server](https://www.cloudflare.com/learning/email-security/what-is-a-mail-server/) activity. ## What SPF Records Are and Why They Matter for InfusionMail Deliverability _SPF stands for Sender Policy Framework, an authentication protocol that tells receiving mail servers which systems are allowed to send email for your domain_. In practical terms, an SPF record is a DNS TXT record published in your domain’s DNS settings. For InfusionMail, the key authorization mechanism is typically: ``` include:infusionmail.com ``` This SPF tells [mailbox providers](https://en.wikipedia.org/wiki/Mailbox%5Fprovider) that InfusionMail is approved to send messages for your domain through **Keap or Infusionsoft**. When your SPF setup is correct, receiving servers can confirm that an Email Broadcast, Email Blasts, automation sequence, or campaign message coming from Keap is authorized. If your SPF setup is missing or misconfigured, you may see lower email deliverability, increased email bounces, spam placement, or mail blocks. ![What SPF Records Are and Why They Matter for InfusionMail Deliverability](https://media.mailhop.org/dmarcreport/dmarc-lookup-5204-1790330249393.jpg) ### How SPF Works with Keap, Infusionsoft, and InfusionMail Keap uses InfusionMail infrastructure to send marketing and transactional messages for many Infusionsoft accounts, including Classic Infusionsoft, Max Classic, and some Pro and Max configurations. The SPF record does not **replace DKIM, DMARC**, or other sender authentication methods; it works alongside them. A typical SPF record for a domain using Google Mail and Keap might look similar to this: ``` v=spf1 include:_spf.google.com include:infusionmail.com ~all ``` This example authorizes Google Mail and InfusionMail in the same SPF record. The goal is to authorize Keap without breaking your existing mail server, [Google Workspace](https://jumpcloud.com/blog/what-is-google-workspace), Microsoft 365, or other email broadcast mail server configuration. Sender Policy Framework helps prevent email spoofing by making it harder for attackers to send mail pretending to be from your domain. However, SPF is only one layer of email authentication. A complete domain authentication strategy should also include DKIM, DKIM setup, DMARC monitoring through tools like DMARC Analyzer or Sendmarc, and ongoing deliverability checks. ## Finding the Correct InfusionMail SPF Include Mechanism and Reviewing Existing DNS Records Before you update SPF, confirm the **correct InfusionMail** include mechanism and review your current DNS setup. For most Keap and Infusionsoft users, the include mechanism is: ``` include:infusionmail.com ``` _You may see this referenced in Keap’s official documentation, Infusionsoft Support articles, KnowledgeOwl resources, or setup flows inside Integration.keap.com_. Some older discussions may mention InfusedMail, Classic Infusionsoft, or legacy Infusionmail naming, but the practical [SPF include](https://dmarcreport.com/blog/what-is-spf-include-and-safe-multiple-spf-includes-usage/) commonly used for Keap authorization remains:infusionmail.com. ### Check Keap and Infusionsoft Domain Authentication Areas Log in to your Keap or Infusionsoft account and look for domain authentication, DKIM settings, or sender authentication options. Depending on your product version, these settings may appear under marketing settings, email settings, or domain configuration. You may also need to **review DKIM settings** and complete your DKIM setup. Keap may provide a DKIM key that must be added as a DNS TXT or [CNAME record](https://www.ibm.com/think/topics/cname), depending on the current instructions in the official documentation. Once added, use the platform’s verify DKIM option to confirm you have functioning DKIM. SPF and DKIM serve different purposes: - SPF confirms that InfusionMail is allowed to send for your domain. - DKIM cryptographically signs messages using a DKIM key. - DMARC tells receiving servers what to do when SPF or DKIM alignment fails. For best email deliverability, complete SPF setup, DKIM setup, and [DMARC monitoring](https://dmarcreport.com/use-dmarcreports-to-monitor-your-domains/) together rather than relying on a single authentication protocol. ### Review Existing DNS Records Before You Update SPF Next, open your **DNS dashboard or DNS control** panel. This might be in GoDaddy, Cloudflare, Namecheap, Network Solutions, a cPanel server, or another hosting provider. Look for an existing TXT record beginning with: ``` v=spf1 ``` _There should be only one SPF record for the root domain. Your existing SPF record may already include Google Mail, Microsoft 365, SendGrid, Mailchimp, or another email sending platform_. Do not create a second SPF record if one already exists. Instead, update SPF by inserting include:infusionmail.com into the existing record. Also review MX records. [MX records](https://support.dnsimple.com/articles/mx-record/) route incoming mail and usually do not need to change for InfusionMail SPF setup. SPF controls outbound authorization, while MX controls inbound delivery. Changing MX unnecessarily can disrupt mail flow. ![Adding or Updating Your Domain’s SPF TXT Record in DNS](https://media.mailhop.org/dmarcreport/dmarc-record-5209-1790330286833.jpg) ## Adding or Updating Your Domain’s SPF TXT Record in DNS Once you know your current DNS settings, **add or modify** the SPF TXT record. If your domain has no SPF record, create a new TXT record at the root domain. A basic InfusionMail SPF record may look like this: ``` v=spf1 include:infusionmail.com ~all ``` If you already use Google Mail, your SPF record may be: ``` v=spf1 include:_spf.google.com include:infusionmail.com ~all ``` If you use Microsoft 365 and Keap, it may resemble: ``` v=spf1 include:spf.protection.outlook.com include:infusionmail.com ~all ``` The exact SPF record depends on every **legitimate email sending** source for your domain. The important point is to authorize Keap by adding include:infusionmail.com to the same SPF record, not by creating a duplicate. ### Provider-Specific DNS Control Panel Notes In most DNS settings screens, you will add or edit: - **Type**: TXT record - **Host/Name**: @ or your root domain - **Value**: your full SPF record - **TTL**: default or automatic For GoDaddy, use the GoDaddy DNS dashboard and edit the TXT value directly. If your setup is tied to a GoDaddy server, confirm whether DNS is managed in GoDaddy or elsewhere. _For cPanel, open Zone Editor on the cPanel server and edit the existing SPF TXT record_. Some hosts also provide email authentication tools inside cPanel, but manual review is still recommended because automated tools may not include InfusionMail. #### Handling Hosted DNS, GoDaddy, and cPanel Server Variations If your domain registrar, website host, and DNS provider are different companies, update the authoritative [DNS control panel](https://www.cloudns.net/blog/what-is-dns-management-how-to-use-cloudns-control-panel/) only. For example, your domain might be registered at GoDaddy, hosted on a cPanel server, but using Cloudflare nameservers. In that case, DNS settings must be changed in Cloudflare, not on the **GoDaddy server or cPanel** server. After saving, allow for propagation. DNS propagation can take minutes or several hours, depending on TTL and resolver caching. ## Avoiding Common SPF Configuration Mistakes, Including Multiple SPF Records and Lookup Limits The most common mistake is publishing multiple SPF records. A domain with two TXT records beginning with v=spf1 can fail SPF validation entirely. Instead of creating a new SPF record for Keap, merge include:infusionmail.com into the existing SPF record. Another common issue is exceeding the SPF 10-DNS-lookup limit. Each include, a, mx, exists, and certain redirect mechanisms can trigger DNS lookups. If your SPF record includes too many third-party senders, receiving mail servers may return a permerror, causing mail blocks or spam filtering. ![Testing, Verifying, and Maintaining Your InfusionMail SPF Setup](https://media.mailhop.org/dmarcreport/what-is-dmarc-5207-1790330340841.jpg) Watch for these SPF setup issues: - Multiple SPF records for **the same hostname** - Missing include:infusionmail.com - Typos such as `includes:infusionmail.com` - Using quotation marks incorrectly in the DNS dashboard - Adding SPF to the wrong hostname - Forgetting to authorize Keap after changing email domains - Removing Google Mail, Microsoft 365, or another active mail server from SPF - Using +all, which effectively authorizes everyone and weakens security If InfusionMail SPF verification fails, first check that your domain has only one SPF record and that include:infusionmail.com is correctly added to it. Also confirm that the SPF record is published on the correct domain and that your DNS provider has saved the changes. If the record is valid but verification still fails, allow time for DNS changes to propagate and then test the record again. If you are unsure which systems need authorization, review your Keap integration settings, current email-sending **platforms, and DNS records**. Keep your SPF record centralized and include only legitimate sending services that actively send email for your domain. ## Testing, Verifying, and Maintaining Your InfusionMail SPF Setup After updating DNS settings, test the SPF setup. Use tools such as MX Toolbox, Mail-tester.com, DMARC Analyzer, or Sendmarc to confirm that your **SPF record is valid** and that include:infusionmail.com resolves properly. MX Toolbox is especially useful for checking SPF syntax, lookup counts, MX, blacklist status, and [DNS propagation](https://www.digicert.com/faq/dns/what-is-dns-propagation). Send a test email from Keap or Infusionsoft after propagation completes. Review the message headers to confirm SPF passes. If SPF fails, check whether the return path aligns with the domain being authenticated. _SPF validation often evaluates the envelope sender or return path, not just the visible From address_. ![Mastering InfusionMail SPF: A 3-Step Guide to Email Deliverability](https://media.mailhop.org/dmarcreport/how-to-create-dmarc-record-8536-1790330420679.jpg) Also verify DKIM. If the platform provides a verified DKIM button, use it after adding the [DKIM key](https://dmarcreport.com/blog/why-are-dkim-keys-important-for-email-deliverability-and-anti-spoofing/). A functioning DKIM setup helps protect your domain if SPF alignment fails due to **forwarding or mailbox** provider behavior. Maintain your InfusionMail SPF record over time by reviewing it whenever you add or remove email sending services. If you migrate from Google Mail to Microsoft 365, change [customer relationship management](https://www.investopedia.com/terms/c/customer%5Frelation%5Fmanagement.asp), add an email broadcast mail server, or modify a Keap integration, revisit the SPF record. A stale SPF setup can cause email bounces, sender authentication failures, or unexpected spam placement. A healthy configuration usually includes: - One valid SPF record - The correct include:infusionmail.com mechanism - No duplicate SPF TXT record - DKIM setup completed and verified - DMARC monitoring through [DMARC](https://dmarcreport.com/) Analyzer, Sendmarc, or similar tools - Periodic testing with Mail-tester.com and MX Toolbox - Updated [DNS settings](https://www.ntchosting.com/encyclopedia/dns/settings/) after any **platform or mail server** change By keeping SPF, DKIM, and domain authentication aligned, you authorize Keap correctly, protect your domain from [email spoofing](https://thehackernews.com/2017/12/email-spoofing-client.html), and give InfusionMail the best chance of reaching the inbox. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager General Manager of DuoCircle. Product strategy and commercial lead for DMARC Report's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Take control of your DMARC reports Turn raw XML into actionable dashboards. Start free - no credit card required. [Start Free Trial](https://app.dmarcreport.com/signup?plan=free) [Check Your DMARC Record](/tools/dmarc-checker/) Scan Your Domain Now Instantly scan your domain for DKIM, SPF, and DMARC issues Check My Domain Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F) [ ](https://twitter.com/intent/tweet?text=How%20To%20Configure%20InfusionMail%20SPF%20Records%20For%20Your%20Domain&url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fhow-to-configure-infusionmail-spf-records-for-your-domain%2F) Copy Related Articles - [ ![10 Critical Learnings From Verizon’s 2021 DBIR - A DMARCReport Perspective](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 10 Critical Learnings From Verizon’s 2021 DBIR - A DMARCReport Perspective Foundational ](/blog/10-critical-learnings-from-verizons-2021-dbir-a-dmarcreport-perspective/) - [ ![10 DNS Blacklist Insights That Improve Email Security And Deliverability Fast](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 10 DNS Blacklist Insights That Improve Email Security And Deliverability Fast Foundational ](/blog/10-dns-blacklist-insights-to-improve-email-security-and-deliverability/) - [ ![10 Email Spoofing Detection Tools That Dramatically Improve Brand Protection](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 10 Email Spoofing Detection Tools That Dramatically Improve Brand Protection Foundational ](/blog/10-email-spoofing-detection-tools-that-dramatically-improve-brand-protection/) - [ ![10 Reasons SPF Filtering Is Critical For Email Security](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 10 Reasons SPF Filtering Is Critical For Email Security Foundational ](/blog/10-reasons-spf-filtering-is-critical-for-email-security/) ## Related Articles [ Foundational 8m 10 Critical Learnings From Verizon’s 2021 DBIR - A DMARCReport Perspective Nov 25, 2025 ](/blog/10-critical-learnings-from-verizons-2021-dbir-a-dmarcreport-perspective/)[ Foundational 12m 10 DNS Blacklist Insights That Improve Email Security And Deliverability Fast Nov 14, 2025 ](/blog/10-dns-blacklist-insights-to-improve-email-security-and-deliverability/)[ Foundational 12m 10 Email Spoofing Detection Tools That Dramatically Improve Brand Protection Nov 11, 2025 ](/blog/10-email-spoofing-detection-tools-that-dramatically-improve-brand-protection/)[ Foundational 12m 10 Reasons SPF Filtering Is Critical For Email Security Nov 19, 2025 ](/blog/10-reasons-spf-filtering-is-critical-for-email-security/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"471","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How To Configure InfusionMail SPF Records For Your Domain","description":"Learn how to configure InfusionMail SPF records, authorize legitimate senders, prevent SPF errors, and improve email authentication and deliverability.","url":"https://dmarcreport.com/blog/how-to-configure-infusionmail-spf-records-for-your-domain/","datePublished":"2026-09-25T00:00:00.000Z","dateModified":"2026-09-25T00:00:00.000Z","dateCreated":"2026-09-25T00:00:00.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://dmarcreport.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"471","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/how-to-configure-infusionmail-spf-records-for-your-domain/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/dmarc-check-5209-1790330140123.jpg","caption":"InfusionMail SPF Records"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"How To Configure InfusionMail SPF Records For Your Domain","item":"https://dmarcreport.com/blog/how-to-configure-infusionmail-spf-records-for-your-domain/"}]} ```