Ensure Better Email Delivery and Prevent Spoofing from Your Hosting Dashboard

Email deliverability is a common concern among website owners. Whether you’re running a small business website or sending newsletters, having your emails land in your recipient’s inbox and not in spam is crucial.
That’s where SPF, DKIM, and DMARC records come in. These DNS-based email authentication mechanisms help mail servers determine whether your domain is authorized to send emails, reducing the chances of being flagged as spam or being spoofed by scammers.
In this article, you’ll learn how to set up and manage SPF, DKIM, and DMARC records directly from cPanel, step by step without needing external tools or technical expertise.

What Are SPF, DKIM, and DMARC?

Let’s start with a quick overview:

 SPF (Sender Policy Framework)

SPF defines which servers are allowed to send emails on behalf of your domain. It helps recipient mail servers verify whether an incoming email from your domain is legitimate.

Example record:

 DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to your outgoing emails. This signature helps the recipient verify that the email wasn’t altered during transit and confirms its origin.

Example DKIM record:

 DMARC (Domain-based Message Authentication, Reporting & Conformance)

DMARC uses both SPF and DKIM results to determine what to do with suspicious emails. It also allows domain owners to receive reports about failed authentication attempts.

Example DMARC record:

Step-by-Step Guide to Configure SPF, DKIM, and DMARC in cPanel

Let’s go through each record setup using cPanel’s DNS editor.

Step 1: Log in to cPanel

• Access your cPanel through your hosting provider.

• Look for the “Email Deliverability” or “Zone Editor” under the Domains or Email section.

Step 2: Enable SPF and DKIM (Automatic Setup)

Most cPanel accounts have a built-in Email Deliverability feature:

1. Go to Email Deliverability
   
   

2. Find your domain in the list and click Manage
   
   

3. If SPF or DKIM is not enabled, you’ll see options to Repair or Install

4. Click Repair or Install Suggested Record for both SPF and DKIM

These records will be automatically added to your DNS zone and contain necessary values based on your hosting email service.

Step 3: Manually Verify or Add SPF Records (Optional)

If you’re using external email services (like Mailchimp, Google Workspace, or a CRM), you may need to modify your SPF record.

1. Go to Zone Editor > Click Manage next to your domain
   
   

2. Filter by TXT records

3. Look for a record starting with v=spf1

4. Edit it to include your authorized email services:

   v=spf1 +a +mx include:_spf.google.com include:mailgun.org ~all


Avoid adding multiple SPF records — only one SPF record per domain is allowed.

Step 4: Locate or Add DKIM Records

If you’ve already enabled DKIM using the Email Deliverability tool, it’s done for you.

To verify:

1. Go to Zone Editor > Manage

2. Look for a TXT record that starts with:

   default._domainkey.yourdomain.com


If you’re using an external mail provider that requires DKIM (like Mailchimp or SendGrid), they’ll give you a TXT name and value to add:

• Name: selector1._domainkey.yourdomain.com

• Value: Provided by the mail provider (long public key string)

Click Add Record, choose TXT, and paste in the given values.

Step 5: Add a DMARC Record

Unlike SPF and DKIM, DMARC isn’t generated automatically in cPanel you must create it manually.

1. Go to Zone Editor > Manage

2. Click Add Record > Select TXT

3. Enter the following details:

   • Name: _dmarc.yourdomain.com

   • TTL: 14400 (or leave default)

   • TXT Data:

     v=DMARC1; p=quarantine; rua=mailto:you@example.com


Here’s what each tag means:

• v=DMARC1: DMARC version

• p=quarantine: Tells recipient to quarantine suspicious emails

• rua: Email where DMARC reports will be sent

You can also use p=none (monitor only) or p=reject (strictest level).

Step 6: Verify Record Propagation

DNS changes can take up to 24–48 hours to propagate globally. To test:

• Use tools like MXToolbox or dmarcian.com

• Check your domain for active SPF, DKIM, and DMARC records

• Review email headers from test emails to confirm successful authentication

Troubleshooting Tips

Why This Setup Matters

Better Deliverability: Your emails are more likely to land in inboxes
Spoofing Protection: Prevent scammers from sending fake emails using your domain
Reputation Monitoring: With DMARC reports, you can spot abuse early

Final Thoughts

Setting up SPF, DKIM, and DMARC may seem technical, but cPanel makes it easier than ever. Once you’ve configured these records, your emails will not only appear more legitimate to recipient servers but also be better protected from spoofing and phishing attempts.
If you ever feel stuck, your hosting provider can help validate your DNS entries. But once you’ve done it once, you’ll find it’s a routine step for any professional email setup.