Making mail authenticate.
WHAT THE PLATFORM WILL ASK FOR
DNS records to add: usually a TXT record for SPF, a TXT or CNAME for DKIM, and sometimes a CNAME for tracking.
WHERE TO ADD THEM
In whichever system holds your DNS. If you use Cloudflare's nameservers, there. Otherwise cPanel > Zone Editor.
Adding them in the wrong place is a common reason verification fails repeatedly.
SPF
Your domain probably already has an SPF record for hosting mail.
You need one record listing every sender, not two records. Two SPF records is a configuration error and causes failures.
Add the platform's mechanism to the existing record.
DKIM
The platform provides a record. Add it exactly as given.
Do not modify it; the value is a key and must be exact.
DMARC
A policy record stating what receivers should do with mail that fails authentication.
Start with a monitoring policy rather than a rejecting one, so you see what is happening before enforcing anything.
VERIFYING
The platform checks the records and confirms. Changes take minutes at Cloudflare, longer elsewhere.
TEST BEFORE SENDING
Send to yourself and read the headers for authentication results.
