DKIM (DomainKeys Identified Mail) is a means of verifying incoming email. It ensures that incoming messages are unmodified and from the sender from whom they claim to be. Technically DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication. For more information please visit http://www.dkim.org
SPF (Sender Policy Framework) system allows you to specify servers and IP addresses that are authorized to send mail from your domain(s). This feature works to prevent outgoing spam messages using your domain from other computers and servers. If someone tries to send emails spoofing your domain in their email address, the receiving servers will check if you authorized them to send email – failing which such spam will be rejected.
We assume you are already logged into cPanel of your web hosting account. Click on Email Deliverability link under Email to proceed.
The next screen shows list of your domains and their email deliverability status. It should say ✔ Valid.
No further configuration is required if it is Valid, otherwise you can click on Repair to let the system configure the required settings, or Manage to see the settings in detail:
This screen shows three validation, DKIM, SPIF and Reverse DNS (PTR), that are important for your email services to function properly. If you notice any issue, please reach out to support to fix it.
When SPF is enabled, a new TXT DNS Record is added to your domain’s DNS zone. It uses your domain’s Mail Exchanger (MX) record, A record and the IPv4 address. In most cases this default setting is good enough to authorize these servers to send email.
In addition to default configuration of SPF, the Email Authentication screen allows you to add additional hosts and make changes to the SPF record.
These settings help prevent spam. The options provided in cPanel attempt to equip email messages with verifiable information so that the nature of incoming and outgoing messages can be detected automatically.
Enabling DKIM and SPF should reduce the number of failed delivery notifications you receive when spammers forge messages from your domain(s). These features also work to prevent spammers from forging messages that claim to be from your domain(s).