How to Configure DKIM and SPF in cPanel

cPanel’s email authentication features provide information about outgoing messages. This helps the receiving server verify that the email is coming from a trusted sender.

Note: Both the DKIM and SPF authentication functions require the server to be a DNS server for the domain name. 

Set up DKIM

DKIM helps verify the sender and integrity of a message. It allows an email system to prove that a message was not altered during transit (meaning it is not forged), and that the message came from the specified domain.

• To use DKIM, click Enable.
• To disable DKIM, click Disable.

Note: If a warning is displayed claiming cPanel is unable to verify that the server is an authoritative nameserver for the specified domain name and either of the following scenarios is true, then please ignore it.

• The server has been changed to be the authoritative DNS server for the domain name, but the change has not yet propagated.
• The server does not view itself as the authoritative DNS server, but outside servers do view it as authoritative.

Set up SPF

This function attempts to prevent spammers from sending email while forging your domain’s name as the sender (spoofing). This authentication function works by adding IP addresses to a list, specifying computers that are authorized to send mail from your domain(s). It verifies that messages sent from your domain(s) are coming from the listed server, reducing the amount of backscatter you receive.

• To use SPF, click Enable.
• To disable SPF, click Disable.

Note: If a warning is displayed claiming cPanel is unable to verify that the server is an authoritative nameserver for the specified domain name and either of the following scenarios is true, then please ignore it.

• The server has been changed to be the authoritative DNS server for the domain name, but the change has not yet propagated.
• The server does not view itself as the authoritative DNS server, but outside servers do view it as authoritative.