How do I set up SPF, DKIM, and DMARC for my email? Print

Correct email authentication – SPF, DKIM, and DMARC – tells other providers that your messages genuinely come from your domain. Without it, your outgoing mail is far more likely to be marked as spam. cPanel can set most of this up for you automatically.

Check and repair with Email Deliverability

1. Log in to cPanel (see How do I log in to cPanel?) and open Email > Email Deliverability.
2. Find your domain. If SPF or DKIM shows an issue, click Manage.
3. Click Repair (or Install the Suggested Record) and cPanel will apply the correct SPF and DKIM records for you.

This works automatically when your domain uses our nameservers (see How do I point my domain to 4GoodHosting?). If your DNS is hosted elsewhere, copy the SPF and DKIM values shown and add them at your DNS provider.

What each one does

• SPF – lists which servers are allowed to send mail for your domain.
• DKIM – adds a digital signature proving your messages were not altered in transit.
• DMARC – tells receivers what to do with mail that fails SPF/DKIM. A safe starting policy is a TXT record at _dmarc.yourdomain.com with the value v=DMARC1; p=none; rua=mailto:you@yourdomain.com – this monitors without blocking anything. Add it under DNS Management, or ask support to set it up.

Tip: after making changes, send a test message to a Gmail or Outlook address and confirm it does not land in spam.