What does this finding mean?
Unauthorised sources receive only a soft failure result.
SPF result code
SPF ends with Softfail
spf.all_softfail
What is the next step?
After reviewing legitimate senders, consider a controlled move to -all.
Please note: The result code describes a technical measurement, not a guarantee of delivery, security or legal compliance.
Content reviewed on 20.08.2026.