How to Add an SPF Record in IONOS

Step-by-step guide to adding and managing SPF records in IONOS (formerly 1&1). Covers creating, editing, and combining SPF records with IONOS DNS settings.

IONOS -- formerly known as 1&1 IONOS and before that simply 1&1 -- is one of the largest hosting and domain providers in Europe and North America. If your domain is registered with IONOS or you're using their nameservers, setting up an SPF record correctly is essential for email deliverability. The branding has changed over the years, but the DNS management process is consistent across the current IONOS Control Panel.

This guide walks you through adding, editing, and troubleshooting SPF records in IONOS DNS settings.

Why You Need SPF With IONOS Domains

Every domain that sends email needs an SPF record. It tells receiving mail servers which IP addresses and services are authorized to send email on behalf of your domain. Without one, providers like Gmail, Outlook, and Yahoo have no way to tell your legitimate email apart from spoofed messages.

IONOS domains are no exception. Whether you use IONOS Mail (their built-in email service), Google Workspace, Microsoft 365, or a third-party sending platform, you need an SPF record published in your domain's DNS.

IONOS may have automatically created an SPF record when you activated their email service. Before adding a new one, check what's already in your DNS to avoid creating duplicate SPF records.

Step-by-Step: Adding an SPF Record in IONOS

1

Log in to the IONOS Control Panel

Go to ionos.com and sign in to your account. You may see "1&1 IONOS" branding depending on your region -- both lead to the same control panel.

2

Navigate to Domains & SSL

From the main dashboard, click Domains & SSL in the left sidebar. This displays all domains associated with your account.

3

Open DNS Settings

Find the domain you want to configure and click on it. Then select DNS or DNS Settings from the domain management options. This opens the full list of DNS records for your domain.

4

Check for existing SPF records

Scroll through the TXT records and look for any record whose value starts with v=spf1. If one already exists, you need to edit it rather than create a new one. Having two SPF records causes a permerror that breaks email authentication entirely.

5

Add a new TXT record

Click Add Record and select TXT as the record type. In the Host Name field, enter @ to represent your root domain. In the Value field, paste your SPF record (for example: v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all). Leave the TTL at the default.

6

Save the record

Click Save. IONOS will add the TXT record to your domain's DNS zone.

7

Wait for DNS propagation

IONOS DNS changes typically propagate within a few minutes to an hour. In some cases, it can take up to 24 hours. You can check propagation status using SPF Record Check.

A Note on the Host Field

In IONOS DNS settings, the host name field for your root domain should be @. Don't type out your full domain name -- IONOS appends it automatically. Entering example.com in the host field would create a record at example.com.example.com, which won't authenticate anything.

IONOS Mail and the perfora.net / kundenserver.de Includes

If you use IONOS Mail (the email service included with IONOS hosting and domain packages), your email is routed through two sets of servers: _spf.perfora.net and _spf.kundenserver.de. Both must be included in your SPF record for IONOS email to pass authentication.

A basic SPF record for IONOS Mail only:

v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all

These two includes cover the full range of IONOS mail infrastructure. Omitting either one can cause intermittent SPF failures depending on which server handles the delivery.

IONOS Mail requires both include:_spf.perfora.net and include:_spf.kundenserver.de in your SPF record. Using only one will result in sporadic authentication failures because IONOS routes mail through both server pools.

Combining SPF Records in IONOS

Most IONOS users eventually need to add another email service alongside IONOS Mail. The rule is always the same -- merge everything into a single SPF record.

IONOS Mail + Google Workspace

v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:_spf.google.com -all

IONOS Mail + Microsoft 365

v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:spf.protection.outlook.com -all

IONOS Mail + SendGrid

v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:sendgrid.net -all

Google Workspace Only (no IONOS Mail)

If you've fully migrated away from IONOS Mail and confirmed no email flows through their servers:

v=spf1 include:_spf.google.com -all
SetupSPF Record
IONOS Mail onlyv=spf1 include:_spf.perfora.net include:_spf.kundenserver.de -all
IONOS Mail + Google Workspacev=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:_spf.google.com -all
IONOS Mail + Microsoft 365v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:spf.protection.outlook.com -all
IONOS Mail + SendGridv=spf1 include:_spf.perfora.net include:_spf.kundenserver.de include:sendgrid.net -all
Google Workspace onlyv=spf1 include:_spf.google.com -all
Microsoft 365 onlyv=spf1 include:spf.protection.outlook.com -all

Check your email deliverability

Make sure your SPF, DKIM, and DMARC records are all working together to protect your domain.

Start Monitoring

Common IONOS SPF Mistakes

IONOS DNS settings are relatively straightforward, but several mistakes come up regularly.

Duplicate SPF Records

The most frequent problem. IONOS may have auto-created an SPF record when you activated their email service. If you then add a second TXT record with a different SPF value, both records break. A domain can only have one SPF record.

Fix: Always check for existing SPF records first. If one exists, edit it to include the new service rather than creating a separate record.

Using the Wrong Host Field

Entering your full domain name instead of @ in the host field creates a record on a nonexistent subdomain. Your root domain remains unprotected.

Fix: Use @ for the host name when setting up SPF for your root domain.

Missing One of the Two IONOS Includes

IONOS routes mail through two server pools. Using only include:_spf.perfora.net or only include:_spf.kundenserver.de means some of your mail will fail SPF checks.

Fix: Always include both _spf.perfora.net and _spf.kundenserver.de if you use IONOS Mail.

Confusion Around IONOS Branding

If you originally signed up with 1&1 or 1&1 IONOS, your login URL and dashboard may look slightly different from current IONOS documentation. The DNS management functionality is the same -- just the branding and UI layout may differ.

Audit before you edit

Before making any SPF changes in IONOS, use SPF Record Check to see your current record. This gives you a baseline to compare against and helps you spot problems you might not have known about.

Editing an Existing SPF Record in IONOS

If you need to update your SPF record to add a new service, remove an old one, or fix a mistake:

1

Go to DNS Settings

Log in to IONOS, navigate to Domains & SSL, select your domain, and open DNS Settings.

2

Find your SPF TXT record

Look through the TXT records for the one starting with v=spf1. Click the edit icon next to it.

3

Modify the value

Update the SPF record value. Add new include: mechanisms for new services, or remove ones you no longer use. Keep v=spf1 at the beginning and -all or ~all at the end.

4

Save and verify

Click Save. Wait a few minutes for propagation, then verify your updated record at SPF Record Check.

Verifying Your IONOS SPF Record

After adding or editing your SPF record, always verify it's live and correct. Go to SPF Record Check and enter your domain. The tool will:

  • Confirm your SPF record is published
  • Check for syntax errors
  • Count your DNS lookups (must be 10 or fewer)
  • Flag duplicate SPF records
  • Show you exactly what receiving servers will see

If you see any errors, go back to IONOS DNS settings and fix them before relying on the record.

Complete Your Email Authentication

SPF is one piece of the email authentication puzzle. For full protection, you need all three protocols working together:

  • DKIM adds a cryptographic signature to your outgoing emails, proving they haven't been tampered with in transit. Use DKIM Creator to generate your DKIM keys and add the records in IONOS the same way you added your SPF record.
  • DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails. Use DMARC Creator to build your DMARC policy.

With all three records published in IONOS DNS, mailbox providers can fully verify that your email is legitimate.

Monitor Your New SPF Record

You've created your SPF record — now make sure it keeps working. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.

Never miss an SPF issue

Monitor your SPF, DKIM, DMARC and MX records daily. Get alerts when something breaks.

Start Monitoring