Save<\/strong>.<\/li>\n<\/ol>\nThis enables DKIM for all existing and future cPanel accounts on the server. WHM automatically generates a 2048-bit RSA key pair per domain and adds the public key to each domain’s DNS zone (if DNS is managed locally).<\/p>\n
\ud83d\udcdd Note: WHM generates DKIM keys at 2048 bits by default as of cPanel version 11.90+. If you’re on an older installation that generated 1024-bit keys, I’d recommend regenerating them. You can do that per-account inside cPanel under Email > Email Deliverability<\/strong>.<\/p>\nStep 2: Enable SPF Globally in WHM<\/h2>\n SPF (Sender Policy Framework) tells receiving servers which IP addresses are allowed to send email for your domain. Without it, anyone can spoof your domain in the “From” address.<\/p>\n
\nStill in Home > Email > Email Authentication<\/strong>, scroll to the SPF<\/strong> section.<\/li>\nEnable the SPF toggle if it isn’t already on.<\/li>\n Click Save<\/strong>.<\/li>\n<\/ol>\nWHM will generate a default SPF record that includes your server’s IP and the mx<\/code> mechanism. For most setups, this is fine. The generated record looks roughly like this:<\/p>\n<\/button>Copied to clipboard<\/span><\/p>\nv=spf1 +a +mx +ip4:YOUR.SERVER.IP ~all<\/code><\/pre>\n<\/div>\n\u26a0 Warning: If your domain sends email through third-party services like Mailchimp, SendGrid, or Postmark, you need to add their sending infrastructure to your SPF record too. The default WHM-generated record won’t include them, and their emails will fail SPF checks. You’d modify the record to something like:<\/p>\n
<\/button>Copied to clipboard<\/span><\/p>\nv=spf1 +a +mx +ip4:YOUR.SERVER.IP include:sendgrid.net include:servers.mcsv.net ~all<\/code><\/pre>\n<\/div>\nKeep SPF records under 10 DNS lookups total. Each include:<\/code>, a<\/code>, and mx<\/code> mechanism counts as a lookup. Exceeding 10 causes a “permerror” and breaks SPF entirely \u2014 this trips up a lot of people who add too many third-party includes over time.<\/p>\nStep 3: Verify DNS Records Are in Place<\/h2>\n After enabling both in WHM, confirm the DNS records actually exist before moving to DMARC. If DNS is managed locally by WHM, the records should be there. If you’re using an external DNS provider, you’ll need to add them manually.<\/p>\n
To check, log in to cPanel for the domain (or use the root WHM account) and go to Email > Email Deliverability<\/strong>. This tool shows you which records are present and flags anything missing or misconfigured.<\/p>\nYou can also verify from the command line on your server:<\/p>\n
<\/button>Copied to clipboard<\/span><\/p>\n# Check SPF record\ndig TXT yourdomain.com +short\n\n# Check DKIM record (replace 'default' with your selector if different)\ndig TXT default._domainkey.yourdomain.com +short<\/code><\/pre>\n<\/div>\nIf the DKIM lookup returns the public key starting with v=DKIM1; k=rsa; p=...<\/code>, you’re good. If it returns nothing, the record isn’t there yet \u2014 either it hasn’t propagated, or it wasn’t written to an external DNS provider.<\/p>\nStep 4: Add a DMARC Record<\/h2>\n DMARC (Domain-based Message Authentication, Reporting, and Conformance) builds on SPF and DKIM. It tells receiving servers what to do when an email fails those checks \u2014 and optionally sends you reports about failures.<\/p>\n
WHM doesn’t add DMARC records automatically. You add it as a TXT record in DNS yourself.<\/p>\n
\nIn WHM, go to DNS Functions > Edit DNS Zone<\/strong> and select your domain.<\/li>\nAdd a new TXT record with the following details:\n\nName:<\/strong> _dmarc.yourdomain.com.<\/code> (note the trailing dot if your DNS editor requires it)<\/li>\nType:<\/strong> TXT<\/li>\nValue:<\/strong> see below<\/li>\n<\/ul>\n<\/li>\n<\/ol>\nStart with a monitoring-only policy. This is the safest approach \u2014 it collects reports without rejecting or quarantining any mail:<\/p>\n
<\/button>Copied to clipboard<\/span><\/p>\nv=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com; ruf=mailto:dmarc-reports@yourdomain.com; fo=1<\/code><\/pre>\n<\/div>\nOnce you’ve reviewed reports for a week or two and confirmed your legitimate mail is passing, tighten the policy:<\/p>\n
<\/button>Copied to clipboard<\/span><\/p>\n# Quarantine (sends failures to spam)\nv=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc-reports@yourdomain.com\n\n# Reject (blocks failures outright \u2014 use only when confident)\nv=DMARC1; p=reject; pct=100; rua=mailto:dmarc-reports@yourdomain.com<\/code><\/pre>\n<\/div>\n\ud83d\udcdd Note: The rua<\/code> address receives aggregate reports (daily digests). The ruf<\/code> address receives forensic reports per failed message. Many mail providers have started limiting ruf<\/code> delivery for privacy reasons, so don’t be surprised if forensic reports are sparse or absent.<\/p>\n\u26a0 Warning: Don’t jump straight to p=reject<\/code> on a domain that’s been sending mail for a while. If any legitimate mail source isn’t covered by SPF or signed with DKIM, it’ll get blocked immediately. Start with p=none<\/code>, always.<\/p>\nCommon Issues and Troubleshooting<\/h2>\nDKIM DNS Record Not Found After Enabling in WHM<\/h3>\n This usually means the domain’s DNS is hosted externally (Cloudflare, Route 53, etc.) rather than on the WHM server. WHM writes DKIM records to its local BIND zone files, but if the domain’s nameservers point elsewhere, those records never go live. Go to Email > Email Deliverability<\/strong> in cPanel, click Repair<\/strong> on the DKIM row, and then manually copy the displayed TXT record into your external DNS provider’s dashboard.<\/p>\nEmails Still Landing in Spam After Adding All Three Records<\/h3>\n Authentication passing doesn’t guarantee inbox placement \u2014 it just removes one major spam signal. Other factors like sender reputation, blacklisted IPs, or spammy content still apply. Run your server IP through MXToolbox Blacklist Check and check your mail logs at \/var\/log\/exim_mainlog<\/code> for delivery details. If your IP is blacklisted, that’s a separate remediation process.<\/p>\nSPF “permerror” \u2014 Too Many DNS Lookups<\/h3>\n This error is annoyingly common and the official docs aren’t great on it. Each mechanism in your SPF record that requires a DNS lookup counts toward the limit of 10. Use a tool like MXToolbox SPF Checker or dmarcian’s SPF Surveyor to count your current lookups. The fix is usually flattening includes \u2014 replacing include:sendgrid.net<\/code> with the actual IP ranges it resolves to, so they become ip4:<\/code> mechanisms instead of counted lookups.<\/p>\nDMARC Reports Show Legitimate Emails Failing<\/h3>\n This typically means a sending service isn’t covered by SPF, not signing with your DKIM key, or both. Common culprits: CRM tools, helpdesk platforms, or automated alerting systems that send from your domain using their own mail infrastructure. Either add them to your SPF record, configure them to use your DKIM key, or set up a subdomain specifically for their sending so it doesn’t affect your main domain’s DMARC policy.<\/p>\n
“DMARC Policy Not Enabled” Warning in WHM Email Deliverability Tool<\/h3>\n WHM’s Email Deliverability tool checks for a DMARC record but doesn’t create one for you. It’s expected to show this warning on a fresh setup. Add the TXT record manually as shown in Step 4. The warning will clear once DNS propagates.<\/p>\n
FAQ<\/h2>\n\n
Frequently Asked Questions<\/h2>\n\n
Do I need to configure SPF, DKIM, and DMARC separately for every domain on my WHM server?<\/h3>\n\n
DKIM and SPF are enabled server-wide through WHM’s Email Authentication page, so they apply to all domains automatically. DMARC is different \u2014 it’s a DNS record you add individually per domain, because the policy and reporting email address are specific to each domain. If you manage dozens of domains, you’ll need to add DMARC records for each one separately.<\/p>\n<\/div>\n<\/div>\n
\n
How long does it take for SPF and DKIM to start working after I enable them?<\/h3>\n\n
If WHM manages your DNS locally, the records are usually active within minutes. If your DNS is at an external provider like Cloudflare and you’ve just added the records manually, allow up to an hour for most resolvers to see them \u2014 though the TTL on the record controls how fast changes propagate. Standard TTL is 3600 seconds (1 hour), but Cloudflare’s proxy cache can sometimes extend this.<\/p>\n<\/div>\n<\/div>\n
\n
What's the difference between SPF softfail (~all) and hardfail (-all)?<\/h3>\n\n
Softfail (~all<\/code>) marks unauthorised mail as suspicious but still delivers it \u2014 most receiving servers will route it to spam rather than reject it outright. Hardfail (-all<\/code>) instructs receiving servers to reject the message entirely. I’d recommend starting with softfail until you’re confident all your legitimate sending sources are covered, then switching to hardfail. Getting this wrong with hardfail will block real email immediately.<\/p>\n<\/div>\n<\/div>\n\n
Can I use WHM email authentication settings if my DNS is managed through Cloudflare?<\/h3>\n\n
You can still use WHM to generate the DKIM keys and SPF values, but you’ll need to manually copy those records into Cloudflare’s DNS dashboard. WHM only writes to its local BIND zone files. Use the Email Deliverability tool in cPanel to see the exact record values, then paste them into Cloudflare as TXT records. Make sure DKIM records in Cloudflare are set to DNS-only (grey cloud), not proxied.<\/p>\n<\/div>\n<\/div>\n
\n
Will enabling DMARC with p=reject break any of my existing email?<\/h3>\n\n
Potentially yes, if any legitimate sending source isn’t passing SPF or DKIM alignment. That’s why you should always start with p=none<\/code>, collect and review DMARC aggregate reports for at least two weeks, then move to p=quarantine<\/code>, and only reach p=reject<\/code> once you’re certain all legitimate mail is authenticated. Skipping straight to reject is one of the most common ways people accidentally block their own transactional or marketing email.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"If your emails are landing in spam or getting rejected outright, missing SPF, DKIM, or DMARC records are usually the culprit. This guide walks you through configuring all three in WHM, step by step, with the gotchas explained.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[88],"tags":[110,284,285,181,396,190,397,89],"class_list":["post-182","post","type-post","status-publish","format-standard","hentry","category-whm","tag-cpanel-email","tag-dkim","tag-dmarc","tag-dns-records","tag-email-authentication","tag-email-deliverability","tag-spf-records","tag-whm"],"yoast_head":"\n
How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)<\/title>\n<meta name=\"description\" content=\"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\/WHM servers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\/WHM servers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/\" \/>\n<meta property=\"og:site_name\" content=\"Host And Tech knowledge base\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/stshostandtech\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-31T06:18:39+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@stshostandtech\" \/>\n<meta name=\"twitter:site\" content=\"@stshostandtech\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#\\\/schema\\\/person\\\/b6fa79c48ddaba71af32e395c5b017ee\"},\"headline\":\"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)\",\"datePublished\":\"2026-05-31T06:18:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/\"},\"wordCount\":1699,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#organization\"},\"keywords\":[\"cPanel email\",\"DKIM\",\"DMARC\",\"DNS records\",\"email authentication\",\"email deliverability\",\"SPF records\",\"WHM\"],\"articleSection\":[\"WHM Guides\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/\",\"url\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/\",\"name\":\"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#website\"},\"datePublished\":\"2026-05-31T06:18:39+00:00\",\"description\":\"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\\\/WHM servers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/whm\\\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#website\",\"url\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/\",\"name\":\"Host And Tech knowledge base\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#organization\",\"name\":\"Host And Tech knowledge base\",\"url\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/logo-dark.png\",\"contentUrl\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/logo-dark.png\",\"width\":1134,\"height\":395,\"caption\":\"Host And Tech knowledge base\"},\"image\":{\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/stshostandtech\",\"https:\\\/\\\/x.com\\\/stshostandtech\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/#\\\/schema\\\/person\\\/b6fa79c48ddaba71af32e395c5b017ee\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/hostandtech.com\\\/kb\"],\"url\":\"https:\\\/\\\/hostandtech.com\\\/kb\\\/author\\\/admin_fjj7qydm\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)","description":"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\/WHM servers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/","og_locale":"en_US","og_type":"article","og_title":"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)","og_description":"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\/WHM servers.","og_url":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/","og_site_name":"Host And Tech knowledge base","article_publisher":"https:\/\/www.facebook.com\/stshostandtech","article_published_time":"2026-05-31T06:18:39+00:00","author":"admin","twitter_card":"summary_large_image","twitter_creator":"@stshostandtech","twitter_site":"@stshostandtech","twitter_misc":{"Written by":"admin","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/#article","isPartOf":{"@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/"},"author":{"name":"admin","@id":"https:\/\/hostandtech.com\/kb\/#\/schema\/person\/b6fa79c48ddaba71af32e395c5b017ee"},"headline":"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)","datePublished":"2026-05-31T06:18:39+00:00","mainEntityOfPage":{"@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/"},"wordCount":1699,"commentCount":0,"publisher":{"@id":"https:\/\/hostandtech.com\/kb\/#organization"},"keywords":["cPanel email","DKIM","DMARC","DNS records","email authentication","email deliverability","SPF records","WHM"],"articleSection":["WHM Guides"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/","url":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/","name":"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)","isPartOf":{"@id":"https:\/\/hostandtech.com\/kb\/#website"},"datePublished":"2026-05-31T06:18:39+00:00","description":"Learn how to configure WHM SPF, DKIM, and DMARC records to stop email spoofing and improve deliverability. Step-by-step guide for cPanel\/WHM servers.","breadcrumb":{"@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostandtech.com\/kb\/whm\/how-to-configure-email-authentication-whm-spf-dkim-dmarc\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostandtech.com\/kb\/"},{"@type":"ListItem","position":2,"name":"How to Configure Email Authentication in WHM (SPF, DKIM, and DMARC)"}]},{"@type":"WebSite","@id":"https:\/\/hostandtech.com\/kb\/#website","url":"https:\/\/hostandtech.com\/kb\/","name":"Host And Tech knowledge base","description":"","publisher":{"@id":"https:\/\/hostandtech.com\/kb\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostandtech.com\/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/hostandtech.com\/kb\/#organization","name":"Host And Tech knowledge base","url":"https:\/\/hostandtech.com\/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostandtech.com\/kb\/#\/schema\/logo\/image\/","url":"https:\/\/hostandtech.com\/kb\/wp-content\/uploads\/2026\/05\/logo-dark.png","contentUrl":"https:\/\/hostandtech.com\/kb\/wp-content\/uploads\/2026\/05\/logo-dark.png","width":1134,"height":395,"caption":"Host And Tech knowledge base"},"image":{"@id":"https:\/\/hostandtech.com\/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/stshostandtech","https:\/\/x.com\/stshostandtech"]},{"@type":"Person","@id":"https:\/\/hostandtech.com\/kb\/#\/schema\/person\/b6fa79c48ddaba71af32e395c5b017ee","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/aa1edac8bbadb442e059a5b65ad45a3b2e3ce689202373b96e3e567517ae4b39?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/hostandtech.com\/kb"],"url":"https:\/\/hostandtech.com\/kb\/author\/admin_fjj7qydm\/"}]}},"_links":{"self":[{"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/posts\/182","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/comments?post=182"}],"version-history":[{"count":0,"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/posts\/182\/revisions"}],"wp:attachment":[{"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/media?parent=182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/categories?post=182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostandtech.com\/kb\/wp-json\/wp\/v2\/tags?post=182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}