SPF, DKIM and DMARC
What these records are, how to check they are enabled and how to keep your mail out of spam.
SPF, DKIM and DMARC are DNS records that recipients use to verify that a message from your domain is really sent by an authorised server. Without them your mail ends up in spam more often.
| Record | Role |
|---|---|
| SPF | Lists which servers may send mail for your domain. |
| DKIM | A digital signature that proves the message was not altered. |
| DMARC | A policy for what the recipient does if SPF or DKIM fail, with reports. |
Checking in cPanel#
- In the Email section open Email Deliverability.
- Look at the status next to your domain. Green means all is fine, and a warning describes the problem.
- If a record is invalid or missing, click Manage.
- Click Install the suggested record or Repair and confirm.
This option works only if the domain uses our nameservers. Otherwise enter the suggested record manually at your DNS provider: Adding a DNS record.
DMARC#
DMARC is a TXT record on the name _dmarc. To start, the lenient policy p=none is often used, where you only monitor reports. Tighten it (quarantine, reject) only once you are sure all legitimate mail passes.
text
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comWas this article helpful?
Thanks for your feedback! Need help? Open a ticket.
Related articles
Adding a DNS recordStep by step: how to add or edit an A, CNAME, MX or TXT record in Zone Editor.Spam filteringHow to enable and tune SpamAssassin, filters and sender blocking.Email not arriving or not sendingA checklist for the most common causes: quota, MX records, password, program settings and spam.Create an email addressHow to create an address like name@yourdomain.com in cPanel and set its password.