How to Set Up SPF, DKIM and DMARC in cPanel

If your emails to Gmail, Outlook, or Yahoo are bouncing back or landing in the spam folder, missing email authentication records are almost certainly the cause. Major providers now strictly require SPF, DKIM, and DMARC records to verify that you are the legitimate sender. Here is how to configure them effortlessly on your Hostinap Shared or Business Hosting account.

What Do These Records Do?

• SPF (Sender Policy Framework): A DNS record that lists which server IP addresses are allowed to send emails on behalf of your domain.
• DKIM (DomainKeys Identified Mail): Adds a cryptographic signature to your emails, proving they were not altered in transit.
• DMARC: Tells the receiving server what to do (e.g. reject or quarantine) if an email claims to be from you but fails the SPF or DKIM check.

How to Set Them Up via cPanel Deliverability Tool

cPanel includes a built-in tool that analyzes your domain and automatically generates and installs the correct records.

1. Log in to cPanel.
2. Scroll down to the Email section and click Email Deliverability.
3. You will see a list of your domains. If the status column says "Problems Exist" or shows a warning icon, click the Manage button next to that domain.
4. cPanel will analyze your SPF, DKIM, and Reverse DNS (PTR).
5. If any record is missing or incorrect, cPanel provides a suggested record. Simply click the Install the Suggested Record button next to it.
6. Do this for both SPF and DKIM.

Note: If your domain's nameservers are not pointed to Hostinap (e.g. you are using Cloudflare DNS), cPanel cannot install the records automatically. You will need to copy the suggested TXT records from cPanel and paste them into your Cloudflare DNS zone manually.

Adding a DMARC Record

While cPanel manages SPF and DKIM well, you should also add a basic DMARC record manually via the Zone Editor.

1. In cPanel, go to Zone Editor (Domains section).
2. Click Manage next to your domain.
3. Click the dropdown arrow next to Add Record and select Add "DMARC" Record.
4. cPanel provides a basic template. A simple, safe starting policy is: v=DMARC1; p=none; (This monitors authentication without blocking any mail yet).
5. Click Add Record.

Wait for DNS Propagation and Test

DNS changes can take up to 24 hours to fully propagate worldwide, though it often takes only a few hours. Once propagation is complete, test your email authentication:

Go to Mail-Tester.com, copy the random email address they provide, and send an email to it from your cPanel webmail. Click "Check your score." A score of 10/10 means your SPF, DKIM, and DMARC are configured perfectly.