SPF and DKIM help receiving servers verify domain-related email authentication. They complement other deliverability checks.
Understand the two mechanisms
SPF publishes authorized sending sources in a TXT record. DKIM lets recipients verify a message signature using a public key published in DNS.
Find the values in cPanel
- Open Email Deliverability.
- Choose the domain, then Manage.
- Review the proposed records and warnings.
Publish in authoritative DNS
If DNS is managed outside cPanel, add the values at that provider. A domain can use several sending services: combine their requirements into one SPF record and the appropriate DKIM selectors without removing an active sender.
Verify and add DMARC
After propagation, inspect a real message from each sending service. DMARC checks authentication and alignment with the visible From domain. Inventory and test senders before applying a rejection policy.
What these settings do not guarantee
Correct authentication supports reliable sending but does not guarantee inbox placement. Check delivery logs, reputation and recipient policies too.
Interface illustrations
These screenshots show the versions used when the original article was written. Labels may differ in your current version; follow the written procedure and your account settings.
Related guides
Reference documentation:
Sources accessed on October 11, 2026. Available features depend on your hosting version and options.