Skip to content

Help Centre › Email

How do I set up SPF, DKIM and DMARC?

In cPanel, open Email → Email Deliverability and click Repair to set up SPF and DKIM, then add a DMARC record as a TXT record named _dmarc. If your DNS is with another provider, cPanel shows the exact records to copy there.

What each record does

RecordWhat it does
SPFLists the servers allowed to send email for your domain.
DKIMAdds a signature to each message so the receiver can check it really came from your domain and wasn’t changed.
DMARCTells receivers what to do with mail that fails SPF and DKIM, and where to send reports.

Since 1 February 2024, Gmail has required every sender to use SPF or DKIM, so without them your mail is likely to land in spam or be refused.

Set up SPF and DKIM

  1. Log in to cPanel and open Email → Email Deliverability.
  2. Find your domain. If it shows a problem, click Repair for SPF and for DKIM.
  3. If your DNS is managed somewhere else (for example at Cloudflare or another registrar), cPanel shows the exact records instead. Copy them to that provider: see How do I add a TXT record?

Add DMARC

  1. In cPanel, open Domains → Zone Editor and click Manage next to the domain.
  2. Click + Add Record and choose TXT.
  3. Name: _dmarc.yourdomain.com. Record: v=DMARC1; p=none; rua=mailto:[email protected]
  4. Save. After a few weeks, once the reports show your real mail passing, change p=none to p=quarantine, and later to p=reject.

Also sending through Google, Microsoft or a newsletter service?

A domain can have only one SPF record. Add the other service to your existing record rather than creating a second one. For example, Google Workspace uses include:_spf.google.com and Microsoft 365 uses include:spf.protection.outlook.com. Turn on DKIM in that service’s admin console too. See Google Workspace or Microsoft 365 on my domain.

Two SPF records on one domain make both of them fail. If Email Deliverability or a checker says you have more than one, merge them into a single record.

Check it works

Send a message to a Gmail address, open it, and choose Show original from the three-dot menu. SPF, DKIM and DMARC should all say PASS.

On a business email plan, we configure SPF, DKIM and DMARC for you; ask us to check them if your mail is going to spam.

Still stuck? Open a support ticket with your domain name, or message us on WhatsApp, Monday to Friday, 08:00–17:00 CAT.

Updated 6 November 2026. Something here out of date? Tell us.

Ask us on WhatsApp