How to Set Up Email Authentication (SPF, DKIM, DMARC)

Why Email Authentication Matters

Without proper email authentication, your emails frequently land in spam folders, and criminals can send emails that appear to come from your domain (email spoofing). SPF, DKIM, and DMARC together prevent this.

SPF (Sender Policy Framework)

SPF tells receiving mail servers which servers are authorised to send email for your domain.

In cPanel → Zone Editor, add a TXT record:

Name: @
Value: v=spf1 +a +mx include:yourhostingserver.com ~all

Or use cPanel → Email Deliverability → Repair to auto-install SPF.

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to your outgoing emails that receiving servers verify.

cPanel → Email Deliverability → Repair auto-installs DKIM for all your email-active domains.

DMARC (Domain-based Message Authentication)

DMARC tells receiving servers what to do with emails that fail SPF and DKIM checks.

Add a TXT record in Zone Editor:

Name: _dmarc
Value: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com