Sender Policy Framework (SPF) is an email authentication protocol that helps prevent email spoofing by allowing domain owners to specify which mail servers are permitted to send emails on behalf of their domains. When an email is sent, the receiving mail server checks the SPF record of the domain to verify that the email is coming from an authorized source.