How to Configure DKIM, SPF & DMARC
DKIM, SPF and DMARC help improve email deliverability and reduce spam issues.
What is SPF?
SPF (Sender Policy Framework) specifies which mail servers are allowed to send email for your domain.
Example SPF Record
v=spf1 a mx ip4:YOUR_SERVER_IP ~all
Example:
v=spf1 a mx ip4:203.0.113.10 ~all
What is DKIM?
DKIM (DomainKeys Identified Mail) digitally signs outgoing emails.
Enable DKIM in cPanel
-
Login to cPanel.
-
Open Email Deliverability.
-
Enable DKIM.
-
Add the generated DNS TXT record.
Example:
default._domainkey.yourdomain.com
TXT Record:
v=DKIM1; k=rsa; p=LONG_PUBLIC_KEY
What is DMARC?
DMARC tells receiving mail servers how to handle emails that fail SPF or DKIM validation.
Example DMARC Record
Host:
_dmarc
TXT Value:
v=DMARC1; p=none; rua=mailto:mail@yourdomain.com
Recommended DMARC Policies
Monitoring Only:
v=DMARC1; p=none
Quarantine Suspicious Emails:
v=DMARC1; p=quarantine
Reject Failed Emails:
v=DMARC1; p=reject
Verify DNS Records
Use tools such as:
-
MXToolbox
-
Google Admin Toolbox
-
Mail Tester
Benefits
-
Improved inbox placement
-
Better email reputation
-
Reduced spoofing
-
Protection against phishing
Troubleshooting
If DKIM fails:
-
Verify DNS propagation.
-
Ensure the DKIM TXT record is complete.
-
Confirm mail server signing is enabled.
For assistance, contact JKReseller Support.