These three DNS records let receiving mail servers verify that mail claiming to be from your domain is genuine. They protect your recipients from forgeries and protect your mail from being filtered as spam.
WHAT EACH DOES
SPF lists which servers are permitted to send mail for your domain. DKIM adds a cryptographic signature proving the message was not altered in transit. DMARC tells receivers what to do when SPF or DKIM fails, and where to send reports.
SETTING THEM UP
- cPanel > Email Deliverability under Email.
- Each domain shows the status of its SPF and DKIM records.
- Where a problem is shown, click Repair and cPanel installs the correct records.
- If your DNS is at Cloudflare or another provider, use "Install the suggested record" to view the values and add them there instead. The Repair button cannot change records we do not host.
ADDING DMARC
Add a TXT record named _dmarc with a value such as:
v=DMARC1; p=none; rua=mailto:[email protected]Start with p=none to collect reports without affecting delivery. Once the reports confirm your legitimate sources all pass, move to p=quarantine and later p=reject.
If you also send through Google Workspace, Microsoft 365 or a bulk provider, include their sending records in your SPF too.
