A Sender Policy Framework (SPF) record is a list of mail servers and domains that are allowed to send emails on your behalf. Adding KnowBe4 to your SPF records allows us to send simulated phishing emails on your behalf and reduces the chance that these emails will be marked as spam or phishing.

To allow KnowBe4's mail servers to send emails on your behalf, add the following line of text to your SPF record:

include:_spf.psm.knowbe4.com

For an example of an SPF record that includes the line of text, see below. The following example uses Google Workspace as the mail server and our US IP addresses:

v=spf1 include:_spf.google.com include:_spf.psm.knowbe4.com ~all

After you update your SPF records, we recommend that you send yourself a test phishing email that spoofs your domain. If you have successfully added KnowBe4 to your SPF record, the email should not go to your Spam folder or be flagged as malicious.

Add KnowBe4’s IP Addresses to Your SPF Record

If you have already added 10 DNS lookups to your SPF record, you’ll need to add our IP addresses to your SPF record. For a list of our IP addresses, see our Whitelisting Guide.

For an example of an SPF record that uses our IP addresses, see below. The following example uses Google Workspace as the mail server:

v=spf1 include:_spf.google.com ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ~all

After you update your SPF records, we recommend that you send yourself a test phishing email that spoofs your domain. If you have successfully added KnowBe4 to your SPF record, the email should not go to your Spam folder or be flagged as malicious.