What does this finding mean?
+all authorises every sending IP and effectively removes the protection.
SPF result code
SPF authorises every sender
spf.all_pass
What is the next step?
Authorise only actual sending paths and use a restrictive final policy.
Please note: The result code describes a technical measurement, not a guarantee of delivery, security or legal compliance.
Content reviewed on 20.08.2026.