Email Authentication: SPF, DKIM, DMARC
Email authentication helps ensure your emails are delivered and not marked as spam.
SPF (Sender Policy Framework):
Tells receivers which servers are allowed to send email for your domain.
- Log in to cPanel
- Go to Email > Email Deliverability
- Click Manage next to your domain
- Enable SPF or add a custom TXT record
- Standard SPF record:
v=spf1 a mx include:yourdomain.com ~all
DKIM (DomainKeys Identified Mail):
Adds a digital signature to your emails so receivers can verify they came from you.
- In Email Deliverability, enable DKIM
- The DNS record will be added automatically
DMARC (Domain-based Message Authentication):
Tells receivers what to do if SPF or DKIM checks fail.
- Add a TXT record with name
_dmarc.yourdomain.com - Start with monitoring mode:
v=DMARC1; p=none; rua=mailto:you@yourdomain.com - Once satisfied, switch to
p=quarantineorp=reject