Chat +1-888-563-5277 [email protected]

How to enable SPF and DKIM in cPanel

As we all know, spam is a serious issue online and is going to be for the next years to come. In fact, according to various studies, spam messages accounted for 53.95% of email traffic as of March 2020.
Due to the increasing damages for organizations done by spam, Mailbox providers like Google, Microsoft, Yahoo!, etc. are implementing more sophisticated spam filter engines to fight against spammers. With that in mind, some legitimate emails may get caught with these filter engines. That is when authentication protocols like SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) come in handy. We’ll show you how to enable SPF and DKIM in cPanel.

In summary:

SPF Records allow receiving servers to check whether an email with the specified source domain was actually sent from a server authorized by the owner of this domain.

The DKIM adds a digital signature to each message. This allows the receiving server to check if the message has been sent from an authorized sender, faked, or changed upon delivery.

Enable SPF and DKIM in cPanel

If your mail server is hosted by webhosting providers like GoDaddy, Bluehost, HostGator, etc. then you are aware of cPanel. The good news is, cPanel v82 introduced a full Email Deliverability tool that you can easily access from your portal and manage your SPF and DKIM records accordingly.

Go to cPanel > Email > Email Deliverability

cPanel-Email-Deliverability-Toolbox

Once there, you will see a list of your domains you’ve added on cPanel with the ‘Email Deliverability Status’. Thus stating if there are any issues with either SPF or DKIM, or both. Also, check out our guide on how to optimize SPF record.

cPanel-SPF-and-DKIM-Issues-enable-SPF-and-DKIM-in-cPanel

Click on Repair

cPanel-SPF-DKIM-Implementation-Fixing-enable-SPF-and-DKIM-in-cPanel

If your DNS (Domain Name System) is managed by the webhost provider itself, then simply re-clicking Repair will fix the issues itself. 

If your DNS is managed by an external source such as Cloudflare, Amazon Route 53, etc. then you have to add the suggested TXT Records manually. 

In this article, we’ll be using Cloudflare to add the TXT Records by copy-pasting the information obtained from the previous screenshot:

For SPF:

cPanel-CloudFlare-SPF

For DKIM:

cPanel-CloudFlare-DKIM

After successfully implementing SPF and DKIM TXT Records, you can click on Repair. You should see that your domain’s Email Deliverability Status is marked as Valid.

cPanel-SPF-DKIM-Valid-Authenticated

Congrats, you’ve authenticated your outgoing mail stream with SPF and DKIM.

Business email compromise (BEC) - 2021 Cybersecurity Problem

Security analysis and predictions for 2021 show that there will be dramatic increases in the number of phishing attacks against cloud-based email. Risk management and security leaders must ensure their solutions stay up-to-date for this changing landscape to protect against cyber attacks. EasyDMARC stays...

Read More

How to explain DKIM in plain English?

DKIM allows the recipient server to make sure (or to verify) that the received message was sent by the genuine sender of the associated domain and that content of the original message was not altered on its way. So let's figure out how to...

Read More

No SPF Record Found: how to fix SPF record issues?

What is an SPF Record? This is a special DNS TXT Record. It lists the IP addresses from which you can send emails on behalf of the domain. How to set up an SPF Record and what happens if there is “No SPF Record...

Read More