The practical steps.
WHERE
cPanel, Email Deliverability.
WHAT IT SHOWS
Each domain, and whether SPF and DKIM are correctly configured.
WHAT TO DO
Check each domain shows no problems.
If it reports an issue, it offers to repair it.
FOR DOMAINS USING OUR NAMESERVERS
Repair publishes the records automatically.
FOR DOMAINS WITH EXTERNAL DNS
cPanel shows the records to add.
Copy them exactly into your DNS provider.
THE EXACT COPY POINT
These records are long and a single error breaks them.
Copy and paste rather than typing.
WHAT TO ADD MANUALLY
DMARC, which cPanel does not generate.
A simple policy record, starting with none.
AFTER PUBLISHING
Wait for propagation, then recheck.
HOW TO VERIFY
Send a test message to an address at a major provider and examine the headers.
Several online tools also check your records.
WHAT TO RECHECK
After any DNS change, and after adding any sending service.