SPF and DKIM help receiving servers verify domain-related email authentication. They complement other deliverability checks.

Understand the two mechanisms

SPF publishes authorized sending sources in a TXT record. DKIM lets recipients verify a message signature using a public key published in DNS.

Find the values in cPanel

  1. Open Email Deliverability.
  2. Choose the domain, then Manage.
  3. Review the proposed records and warnings.

Publish in authoritative DNS

If DNS is managed outside cPanel, add the values at that provider. A domain can use several sending services: combine their requirements into one SPF record and the appropriate DKIM selectors without removing an active sender.

Verify and add DMARC

After propagation, inspect a real message from each sending service. DMARC checks authentication and alignment with the visible From domain. Inventory and test senders before applying a rejection policy.

What these settings do not guarantee

Correct authentication supports reliable sending but does not guarantee inbox placement. Check delivery logs, reputation and recipient policies too.

Interface illustrations

These screenshots show the versions used when the original article was written. Labels may differ in your current version; follow the written procedure and your account settings.

cPanel email tools
SPF and DKIM records in cPanel
Repairing DKIM and SPF records in Email Deliverability
Email authentication diagnostic in cPanel
Managing the domain’s SPF and DKIM records
Copying DKIM and SPF values in cPanel

Related guides

Reference documentation:

Sources accessed on October 11, 2026. Available features depend on your hosting version and options.