Loading...

Knowledge Base

Set up SPF, DKIM, and DMARC records for cPanel email

Add SPF, DKIM, and DMARC records to your domain’s DNS, so other mail servers can confirm that emails from your cPanel email accounts really come from you. This helps your emails reach inboxes instead of spam folders. You get the SPF and DKIM values from cPanel, then add all three records wherever your domain’s DNS is managed.

 

Get your SPF and DKIM values from cPanel

cPanel creates the SPF and DKIM values for your email. Follow these steps to find them:

  1. Log in to your cPanel.
  2. In cPanel, under Email, click Email Deliverability.
  3. Next to your domain, click Manage.
  4. Copy the name and value of the suggested SPF, DKIM, and DMARC record, and keep them for the next steps.

You should have the DNS records ready like below:

Record Record type Name Value

SPF

TXT

<YOURDOMAIN.COM>

The suggested SPF value from Email Deliverability. It starts with v=spf1.

DKIM

TXT

default._domainkey.<YOURDOMAIN.COM>

The suggested DKIM value from Email Deliverability. It starts with v=DKIM1.

DMARC

TXT

_dmarc.<YOURDOMAIN.COM>

v=DMARC1; p=none; rua=mailto:<EMAIL-ADDRESS>

 

Add the cPanel SPF, DKIM and DMARC records to your DNS

The following table shows where to add the records for each set of name servers:

Name servers Where your DNS is managed How to add the records

ns1.crazydomains.com and ns2.crazydomains.com

Account Manager

See Manage DNS records in the Account Manager

ns1.syrahost.com and ns2.syrahost.com

cPanel

See Manage DNS records in cPanel

Other name servers

Your DNS provider

Follow your DNS provider's instructions

You may also follow the generic instructions below:

These general steps work in most DNS managers, including the Account Manager and cPanel. Follow them in the place where your domain’s DNS is managed:

  1. Sign in to your DNS provider, and open the DNS records for your domain.
  2. Add a TXT record for SPF, using the name and value from The records to add. If an SPF record already exists, edit it instead.
  3. Add a TXT record for DKIM, with default._domainkey as the name.
  4. Add a TXT record for DMARC, with _dmarc as the name.
  5. Save your changes.

In the DMARC value, replace <EMAIL-ADDRESS> with the address that should receive DMARC reports, such as [email protected]. The p=none setting only monitors your email and doesn’t block anything, so it’s a safe way to start. When the reports show that your emails pass SPF and DKIM, you can change it to p=quarantine or p=reject.

 

 

Loading...