Managing SPF, DKIM, and DMARC Records in cPanel for Secure Email Delivery

Managing SPF, DKIM, and DMARC Records in cPanel for Secure Email Delivery

Introduction

Email authentication protocols like SPF, DKIM, and DMARC help verify that emails sent from your domain are legitimate and protect your brand from spoofing and phishing attacks. Managing these DNS records correctly in cPanel improves email deliverability and security.

What Are SPF, DKIM, and DMARC?

• SPF (Sender Policy Framework): Specifies which mail servers are authorized to send emails on behalf of your domain.
• DKIM (DomainKeys Identified Mail): Adds a digital signature to emails, allowing the receiver to verify the message was not altered.
• DMARC (Domain-based Message Authentication, Reporting & Conformance): Builds on SPF and DKIM by specifying how email receivers should handle unauthenticated emails and sends reports to domain owners.

Step 1: Access DNS Zone Editor in cPanel

1. Log in to your cPanel account.
2. Navigate to the Domains section and click on Zone Editor or DNS Zone Editor.
3. Select your domain from the list to manage its DNS records.

Step 2: Add or Manage SPF Record

The SPF record is usually a TXT record in your DNS settings.

1. Look for an existing TXT record that starts with v=spf1. If it exists, you may need to update it.
2. If none exists, click Add Record and select TXT as the type.
3. In the Name field, enter your domain (e.g., example.com).
4. In the TXT Data field, enter your SPF rule. Example:
   v=spf1 a mx ip4:192.168.0.1 include:spf.protection.outlook.com ~all
5. Save the record.

Step 3: Enable DKIM in cPanel

1. Return to the cPanel main page.
2. In the Email section, click Email Deliverability or Authentication.
3. Find your domain and check if DKIM is enabled.
4. If DKIM is disabled, click the Enable button to generate the necessary DKIM record automatically.

Step 4: Add or Configure DMARC Record

DMARC is also a TXT record. Here’s how to add it:

1. Go back to the Zone Editor in cPanel.
2. Click Add Record and choose TXT.
3. In the Name field, enter _dmarc.example.com (replace example.com with your domain).
4. In the TXT Data field, enter your DMARC policy. Example:
   v=DMARC1; p=none; rua=mailto:admin@example.com; ruf=mailto:admin@example.com; pct=100
5. Save the record.

Verifying Your Records

After adding these records, it’s good practice to verify them using online tools such as:

• MXToolbox SPF Checker
• DKIM Validator
• DMARC Inspector

Troubleshooting Tips

• Changes to DNS records may take up to 24-48 hours to propagate.
• Make sure no duplicate SPF records exist for your domain.
• Use the exact syntax for records; small mistakes can invalidate the records.

Need Help?

If you need further assistance managing your SPF, DKIM, or DMARC records, contact Hiverift Dev Support.

© 2025 Hiverift. All rights reserved.