How to Set up SPF, DKIM, and DMARC Records September 15, 2025

Email verification is essential to enhance performance and safeguard your domain against phishing and spoofing. To accomplish this, you must set up SPF, DKIM, and DMARC records for your domain.
Note: These entries might be configured by default if your domain is already using eukhost’s DNS.

What is SPF and How to Enable It on cPanel?

SPF (Sender Policy Framework) helps mail servers verify that emails from your domain are being sent by authorised servers.  This prevents spammers from imitating your domain name.

Steps to enable SPF in cPanel:

1. Log in to your cPanel account.
2. Go to the ‘Email Deliverability’ option under the ‘Email’.
   
3. Click on the ‘Manage’ button next to your domain.
   
4. Scroll to the Sender Policy Framework (SPF) section.
5. In the Record field, enter the SPF value. Example:v=spf1 a mx ~all.
6. Handle Existing or Missing SPF Record:
   1.  If SPF exists > click ‘Customise’.
   2. If no SPF exists > click ‘Install The Suggested Record’.
      
      
   3. Allow up to 24 hours for DNS propagation to complete.
      Once enabled, recipients can confirm that your domain’s emails are coming from authorised servers.

What is DKIM and How to Enable It on cPanel?

DKIM (DomainKeys Identified Mail) ensures that your email content has not been changed during transit and confirms that it truly comes from your domain.
Steps to enable DKIM in cPanel:

1. Log in to your cPanel account.
2. Go to the ‘Email Deliverability’ option under the ‘Email’ section.
3. Click on the ‘Manage’ button next to your domain.
   
4. Scroll down to the DomainKeys Identified Mail (DKIM) section.
5. Click ‘Install The Suggested Record’ to generate a DKIM key.
   
6. Allow up to 24 hours for DNS propagation to complete.
   Once enabled, your outgoing emails will include a DKIM signature that mail servers can verify.

What is DMARC, and how to enable it on cPanel?

DMARC (Domain-based Message Authentication, Reporting & Conformance) tells receiving servers how to handle emails that fail SPF or DKIM checks. It also provides reporting to track unauthorised email usage.
Steps to enable DMARC in cPanel:

1. Log in to your cPanel account.
2. Go to the ‘Zone Editor’ under the ‘Domains’.
   
3. Click on the ‘Manage’ button next to your domain.
   
4. Click ‘+ Add Record’.
   
5. Enter the following:
   •  Name: _dmarc
   • TTL: 600 (default)
   • Type: TXT
   • Value: v=DMARC1; p=none

   • Click ‘Save Record’.
     
     

6.  Allow up to 24 hours for DNS propagation to complete.
   Once enabled, receiving servers can implement policies (none, quarantine, or reject) based on your DMARC settings.

Example Records:

Here are sample records you can customise:

1. The SPF record can be written as:

   v=spf1 include:spf.domain.com ~all

2. The DKIM record is usually generated automatically in cPanel, and it looks like:

   default._domainkey IN TXT “v=DKIM1; k=rsa; p=MIIBIjANBgkqh…”

3. A basic DMARC record example is:

    _dmarc IN TXT “v=DMARC1; p=none”

4. An advanced DMARC record example is:

   _dmarc.example.com IN TXT 14400 “v=DMARC1; p=quarantine; 
   pct=100; rua=mailto:[email protected]”

Best Practice

• TTL values may vary if your DNS is hosted externally.
• For production servers, use stricter DMARC policies such as:
  • v=DMARC1; p=quarantine; rua=mailto:[email protected]
  • v=DMARC1; p=reject; rua=mailto:[email protected]
• When using advanced DMARC policies (quarantine or reject), ensure that DMARC reports are delivered to a monitored mailbox to avoid email delivery issues.

By following these steps, you can successfully add SPF, DKIM, and DMARC records for your domain. This improves email security, prevents spoofing, and ensures better email deliverability to your recipients’ inboxes.

For a detailed SPF setup in cPanel, Learn How to create a Basic SPF Record in cPanel.