Knowledgebase

Configure SPF, DKIM, and DMARC records in cPanel.

In order to secure your email service and to make sure you do not have mail spoofing issues, you must set SPF, DKIM, and DMARC records for your domain / hosting.

Go to cPanel -> Email Section -> Email Deliverability -> Manage

DKIM - You can view and copy the currently configured key and value.

SPF - You can accept the suggested suggestion in the cPanel, or you can by "Customize" it by the link. If you choose to "customize" your SPF record, a new page is opened and you can add a "+ a", "ip4", "ip6", "mx" and "include" value. During a change, you will be able to preview the new SPF record.

DMARC - This is a TXT record that virtually tells the recipient to send an email to a particular email address, if it receives spam from a given domain. The record is added from cPanel -> Zone Editor and should look like this:

_dmarc.domain.TLD IN TXT 14400 "v = DMARC1; p = none; rua = mailto: postmaster@yourdomain.com"

where you need to change domain.TLD and postmaster@your_domain.com to replace them according to your case.

You can also use custom SPF and DKIM values ​​for your domains. You can add the records using the cPanel DNS zone editor.

More information on the "Email Deliverability" option? See the cPanel link https://documentation.cpanel.net/display/78Docs/Email+Deliverability+in+cPanel#

You want to check that your changes are taken into account? Check with an external tool like this: https://mxtoolbox.com/NetworkTools.aspx