How to Set Up SPF, DKIM, and DMARC for Better Email Deliverability

Setting Up Email Authentication Records

Email authentication records (SPF, DKIM, DMARC) tell receiving mail servers that your emails are legitimate. Without them, your emails may land in spam.

What Each Record Does

Step 1 — Set Up SPF Record

1. cPanel → Domains → Zone Editor
2. Click Manage next to your domain
3. Click + Add Record → select TXT
4. Enter:

Name: yourdomain.co.ke

   Value: v=spf1 include:braysons.co.ke ~all
   TTL: 14400

1. Click Add Record

If you also send from Gmail or other services:

v=spf1 include:braysons.co.ke include:_spf.google.com ~all

Step 2 — Enable DKIM in cPanel

1. cPanel → Email → Email Deliverability
2. Find your domain and click Manage
3. Under DKIM, click Install the suggested record
4. cPanel will automatically add the DKIM TXT record to your DNS zone

Step 3 — Set Up DMARC Record

1. In Zone Editor, add a new TXT record:

Name: _dmarc.yourdomain.co.ke

   Value: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.co.ke
   TTL: 14400

Start with p=none (monitor mode) before moving to p=quarantine or p=reject.

Step 4 — Verify Your Records

Use mxtoolbox.com to verify:

• SPF: mxtoolbox.com/spf.aspx
• DKIM: mxtoolbox.com/dkim.aspx
• DMARC: mxtoolbox.com/dmarc.aspx

Testing Email Deliverability

Send a test email to mail-tester.com — it will score your email from 1–10 and show exactly what to fix. Aim for a score of 9 or 10.

DMARC Policy Progression

Once you have confirmed your legitimate emails are passing SPF and DKIM:

1. Start: p=none (monitor only)
2. After 2 weeks: p=quarantine (suspicious emails go to spam)
3. After 1 month: p=reject (suspicious emails are rejected)