HubSpot sends email on your behalf using our shared email servers. SPF is used to verify the identity of that server, so we already have an SPF policy to cover this shared system.
Adding HubSpot to your SPF record is optional. You don't need it to connect your email sending domain. If you do decide to add HubSpot to your SPF policy, you can find your record in the domain manager. It is strongly suggested that you consult with your IT department to fully understand the ramifications this change will present.
- Navigate in HubSpot Marketing to Content > Content Settings > Domain Manager.
- Scroll to the bottom of your screen and click View SPF record in the bottom left corner.
- Here, you can copy your SPF record to add to your DNS.
If you're looking for email authentication but don't qualify for a dedicated IP, consider DKIM email authentication for an added layer of security.
If you'd like to use a DMARC policy with HubSpot, you can learn more here.