How to Add an SPF Record in IONOS
Step-by-step guide to adding and managing SPF records in IONOS (formerly 1&1). Covers creating, editing, and combining SPF records with IONOS DNS settings.
IONOS -- formerly known as 1&1 IONOS and before that simply 1&1 -- is one of the largest hosting and domain providers in Europe and North America. If your domain is registered with IONOS or you're using their nameservers, setting up an SPF record correctly is essential for email deliverability. The branding has changed over the years, but the DNS management process is consistent across the current IONOS Control Panel.
This guide walks you through adding, editing, and troubleshooting SPF records in IONOS DNS settings.
Why You Need SPF With IONOS Domains
Every domain that sends email needs an SPF record. It tells receiving mail servers which IP addresses and services are authorized to send email on behalf of your domain. Without one, providers like Gmail, Outlook, and Yahoo have no way to tell your legitimate email apart from spoofed messages.
IONOS domains are no exception. Whether you use IONOS Mail (their built-in email service), Google Workspace, Microsoft 365, or a third-party sending platform, you need an SPF record published in your domain's DNS.
IONOS may have automatically created an SPF record when you activated their email service. Before adding a new one, check what's already in your DNS to avoid creating duplicate SPF records.
Step-by-Step: Adding an SPF Record in IONOS
Log in to the IONOS Control Panel
Go to ionos.com and sign in to your account. You may see "1&1 IONOS" branding depending on your region -- both lead to the same control panel.
Navigate to Domains & SSL
From the main dashboard, click Domains & SSL in the left sidebar. This displays all domains associated with your account.
Open DNS Settings
Find the domain you want to configure and click on it. Then select DNS or DNS Settings from the domain management options. This opens the full list of DNS records for your domain.
Check for existing SPF records
Scroll through the TXT records and look for any record whose value starts with v=spf1. If one already exists, you need to edit it rather than create a new one. Having two SPF records causes a permerror that breaks email authentication entirely.
Add a new TXT record
Click Add Record and select TXT as the record type. In the Host Name field, enter @ to represent your root domain. In the Value field, paste your SPF record (for example: v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all). Leave the TTL at the default.
Save the record
Click Save. IONOS will add the TXT record to your domain's DNS zone.
Wait for DNS propagation
IONOS DNS changes typically propagate within a few minutes to an hour. In some cases, it can take up to 24 hours. You can check propagation status using SPF Record Check.
A Note on the Host Field
In IONOS DNS settings, the host name field for your root domain should be @. Don't type out your full domain name -- IONOS appends it automatically. Entering example.com in the host field would create a record at example.com.example.com, which won't authenticate anything.
IONOS Mail and the perfora.net / kundenserver.de Includes
If you use IONOS Mail (the email service included with IONOS hosting and domain packages), your email is routed through two sets of servers: _spf.perfora.net and _spf.kundenserver.de. Both must be included in your SPF record for IONOS email to pass authentication.
A basic SPF record for IONOS Mail only:
v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all
These two includes cover the full range of IONOS mail infrastructure. Omitting either one can cause intermittent SPF failures depending on which server handles the delivery.
IONOS Mail requires both include:_spf.perfora.net and include:_spf.kundenserver.de in your SPF record. Using only one will result in sporadic authentication failures because IONOS routes mail through both server pools.
Combining SPF Records in IONOS
Most IONOS users eventually need to add another email service alongside IONOS Mail. The rule is always the same -- merge everything into a single SPF record.
IONOS Mail + Google Workspace
v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:_spf.google.com -all
IONOS Mail + Microsoft 365
v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:spf.protection.outlook.com -all
IONOS Mail + SendGrid
v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:sendgrid.net -all
Google Workspace Only (no IONOS Mail)
If you've fully migrated away from IONOS Mail and confirmed no email flows through their servers:
v=spf1 include:_spf.google.com -all
| Setup | SPF Record |
|---|---|
| IONOS Mail only | v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all |
| IONOS Mail + Google Workspace | v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:_spf.google.com -all |
| IONOS Mail + Microsoft 365 | v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:spf.protection.outlook.com -all |
| IONOS Mail + SendGrid | v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:sendgrid.net -all |
| Google Workspace only | v=spf1 include:_spf.google.com -all |
| Microsoft 365 only | v=spf1 include:spf.protection.outlook.com -all |
Check your email deliverability
Make sure your SPF, DKIM, and DMARC records are all working together to protect your domain.
Common IONOS SPF Mistakes
IONOS DNS settings are relatively straightforward, but several mistakes come up regularly.
Duplicate SPF Records
The most frequent problem. IONOS may have auto-created an SPF record when you activated their email service. If you then add a second TXT record with a different SPF value, both records break. A domain can only have one SPF record.
Fix: Always check for existing SPF records first. If one exists, edit it to include the new service rather than creating a separate record.
Using the Wrong Host Field
Entering your full domain name instead of @ in the host field creates a record on a nonexistent subdomain. Your root domain remains unprotected.
Fix: Use @ for the host name when setting up SPF for your root domain.
Missing One of the Two IONOS Includes
IONOS routes mail through two server pools. Using only include:_spf.perfora.net or only include:_spf.kundenserver.de means some of your mail will fail SPF checks.
Fix: Always include both _spf.perfora.net and _spf.kundenserver.de if you use IONOS Mail.
Confusion Around IONOS Branding
If you originally signed up with 1&1 or 1&1 IONOS, your login URL and dashboard may look slightly different from current IONOS documentation. The DNS management functionality is the same -- just the branding and UI layout may differ.
Audit before you edit
Before making any SPF changes in IONOS, use SPF Record Check to see your current record. This gives you a baseline to compare against and helps you spot problems you might not have known about.
Editing an Existing SPF Record in IONOS
If you need to update your SPF record to add a new service, remove an old one, or fix a mistake:
Go to DNS Settings
Log in to IONOS, navigate to Domains & SSL, select your domain, and open DNS Settings.
Find your SPF TXT record
Look through the TXT records for the one starting with v=spf1. Click the edit icon next to it.
Modify the value
Update the SPF record value. Add new include: mechanisms for new services, or remove ones you no longer use. Keep v=spf1 at the beginning and -all or ~all at the end.
Save and verify
Click Save. Wait a few minutes for propagation, then verify your updated record at SPF Record Check.
Verifying Your IONOS SPF Record
After adding or editing your SPF record, always verify it's live and correct. Go to SPF Record Check and enter your domain. The tool will:
- Confirm your SPF record is published
- Check for syntax errors
- Count your DNS lookups (must be 10 or fewer)
- Flag duplicate SPF records
- Show you exactly what receiving servers will see
If you see any errors, go back to IONOS DNS settings and fix them before relying on the record.
Complete Your Email Authentication
SPF is one piece of the email authentication puzzle. For full protection, you need all three protocols working together:
- DKIM adds a cryptographic signature to your outgoing emails, proving they haven't been tampered with in transit. Use DKIM Creator to generate your DKIM keys and add the records in IONOS the same way you added your SPF record.
- DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails. Use DMARC Creator to build your DMARC policy.
With all three records published in IONOS DNS, mailbox providers can fully verify that your email is legitimate.
Related Articles
Monitor Your New SPF Record
You've created your SPF record — now make sure it keeps working. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.
Never miss an SPF issue
Monitor your SPF, DKIM, DMARC and MX records daily. Get alerts when something breaks.
Start Monitoring