How to fix weak spf on PrestaShop

Steps for PrestaShop

1. PrestaShop does not manage DNS. Log in to your domain registrar or hosting DNS panel.
2. Find the TXT record for your root domain (@) starting with v=spf1.
3. If you send email via your server's native PHP mail or a configured SMTP (set in PrestaShop Back Office → Advanced Parameters → Email), ensure the sending server IP or SMTP relay's include: entry is present.
4. Append -all to the end of the record and save.

What is weak spf?

SPF (Sender Policy Framework) is a DNS record that tells the world which mail servers are allowed to send email on behalf of your domain. The record ends with a mechanism that instructs receiving mail servers what to do with messages from servers that are not on your approved list. A record that ends without `-all` (hardfail) or `~all` (softfail) — or that redirects to another SPF record that itself has no proper terminator — is considered "weak" because it gives receiving servers no clear instruction to reject or flag unauthorized senders. This is the exact situation in a record like `v=spf1 redirect=cf3962es._spf._d.mim.ec` where the final verdict depends entirely on the target record and may resolve to a neutral or missing terminator.

Without a proper SPF terminator, spammers and phishers can send emails that appear to come from your domain and pass (or get no verdict on) SPF checks — making it trivially easy to impersonate your brand in phishing campaigns targeting your customers and suppliers. This directly damages customer trust, can get your legitimate email domain blacklisted, and reduces inbox delivery rates for your real marketing and transactional emails, hurting revenue. From a compliance perspective, email spoofing facilitated by a weak SPF record can expose you to regulatory scrutiny under data-protection and anti-fraud laws. OWASP A05:2021 (Security Misconfiguration) explicitly covers this class of configuration omission.

See the complete Weak spf guide for every platform and the full background.