How to Enable SPF, DKIM, and DMARC Records in cPanel

How to Configure SPF, DKIM & DMARC in cPanel

To make sure your domain emails are delivered securely and don’t end up in spam, follow these steps inside cPanel:

the first thing -Sign in to your cPanel account and go to the Email section,Click on Email Deliverability. This page will display

all domains linked to your account along with their current status.

After opening Email Deliverability, you will see a list of your domains and the current status of their records:

• If the status shows Valid, it means SPF and DKIM are correctly configured and no further action is needed.
• If you see a warning like Problems Exist (SPF or DKIM missing/invalid), you can fix it by clicking on the Repair button.

  ---

Repair Option

The Repair function allows cPanel to automatically correct missing or invalid records.

⚠️ Important notes:

• This option is available only if your domain is using Thamara’s shared hosting nameservers. If your DNS is managed elsewhere, you’ll need to add the records manually.
• Bulk repair is only possible if the domains are in separate DNS zones. Otherwise, each domain must be fixed individually.
• The repair process continues even if you refresh or reload the page.

After clicking Repair, the system will suggest fixes for any invalid DNS records. You’ll have the option to review, copy, or customize these records before applying them. Once confirmed, the entries are automatically added to your domain or subdomain’s DNS zone.

⚡ Keep in mind:

• The process may take up to five minutes.
• When the records are successfully updated, the status will change to Valid.
• Allow some time for DNS propagation before refreshing the page.

Alternatively, you can choose the Manage option to manually configure your domain’s mail-related DNS records. In this section, the DKIM and SPF values are already displayed—you can either copy them into your DNS zone or simply click Install the Suggested Record (available only if your domain uses Thamara’s shared hosting nameservers).

After the record is installed, you will receive the confirmation message.

In the SPF section, you will also have an option to Customize the system's recommended SPF record for a domain.

The interface displays the domain's current SPF name and value in the Current "SPF" (TXT) Record section, if one exists, and the system's recommendations in the Suggested "SPF" (TXT) Record section:

You can configure the following settings:

1. Domain Settings- this section allows you to define the hosts or MX servers allowed to send mail from your domain:

    2-IP Address Settings- You can add further IP address blocks to your SPF record using this section. The system automatically adds the primary IPv4 or IPv6 addresses of your server to these lists:

   
3-Additional Settings- You can change more SPF record settings in this area.

4. Preview of the Updated Record- Based on its current revisions, this section depicts what the modified SPF record would appear like. To set up the fresh record, click on the Install a Customized SPF Record button:

General DMARC setting

Just like SPF and DKIM, DMARC is a simple one-line entry in your DNS records.

Before setting it, make sure you've configured SPF and DKIM records for the required domain. 

Then follow these steps:

• Go to your DNS settings and create a new record via the drop-down menu → Add "TXT" Record.

• Add the hostname (for example, _dmarc):

DMARC Record – Tag Meanings

• v → Version of DMARC (always stays the same).
• p → Policy for handling emails:
• none = just monitor, no action.
• quarantine = suspicious emails go to Spam.
• reject = block emails that fail checks.
• rua → Email address to receive summary (aggregate) reports. Must be on the same domain.
• ruf → Email address to get detailed failure reports (best to use a separate mailbox).
• fo → When to send failure reports:
• 0 = only if both SPF and DKIM fail (default).
• 1 = if either SPF or DKIM fails.
• d = for every DKIM check.
• s = for every SPF check.