How to fix weak spf on BigCommerce

Steps for BigCommerce

1. BigCommerce does not manage your DNS. DNS is controlled by your domain registrar or a CDN/DNS provider such as Cloudflare.
2. Log in to your domain registrar (e.g., GoDaddy, Namecheap, Google Domains/Squarespace Domains) or DNS provider.
3. Navigate to DNS Management / Zone Editor for your domain.
4. Locate the TXT record starting with `v=spf1`. Edit it to add `-all` (recommended) or `~all` at the very end of the record value.
5. Save the record and verify propagation with an SPF checker tool.

What is weak spf?

SPF (Sender Policy Framework) is a DNS record that tells the world which mail servers are allowed to send email on behalf of your domain. The record ends with a mechanism that instructs receiving mail servers what to do with messages from servers that are not on your approved list. A record that ends without `-all` (hardfail) or `~all` (softfail) — or that redirects to another SPF record that itself has no proper terminator — is considered "weak" because it gives receiving servers no clear instruction to reject or flag unauthorized senders. This is the exact situation in a record like `v=spf1 redirect=cf3962es._spf._d.mim.ec` where the final verdict depends entirely on the target record and may resolve to a neutral or missing terminator.

Without a proper SPF terminator, spammers and phishers can send emails that appear to come from your domain and pass (or get no verdict on) SPF checks — making it trivially easy to impersonate your brand in phishing campaigns targeting your customers and suppliers. This directly damages customer trust, can get your legitimate email domain blacklisted, and reduces inbox delivery rates for your real marketing and transactional emails, hurting revenue. From a compliance perspective, email spoofing facilitated by a weak SPF record can expose you to regulatory scrutiny under data-protection and anti-fraud laws. OWASP A05:2021 (Security Misconfiguration) explicitly covers this class of configuration omission.

See the complete Weak spf guide for every platform and the full background.