Creating a basic SPF Record in cPanel
SPF records are necessary in order to help prevent your email addresses from being spoofed. If you do not understand what spoofing or an SPF record is, please see our Guide to SPF Records. This article is part of that series where we demonstrate how to set up a basic SPF record from within your cPanel.
Creating a basic SPF Record within cPanel
- Log into your cPanel dashboard.
- From the main cPanel page, look for the Email category. From there, click on the Authentication icon.
- This brings you to the Authentication screen. Begin by finding the SPF subsection, which is the vast majority of the page. Scroll down to the lower part of the screen and check the checkbox for the All Entry (ALL):.
This is important as it adds the '-all' to the end of the record so that all addresses that fail the other checks will be rejected.
- Now that you have set the basic SPF settings, scroll back up to the top and click the Enable button for the SPF section.
The server now creates the SPF record for your hosting account. You will receive a success message along with the SPF record's full syntax on the screen.
You are NOT logged in. You can still browse our Support Center.
To participate within our Community Support Forum:
2018-10-31 11:12 am
Hi, My domain is hosted on res217 server. What are the hosts and domains, I must enlist in my spf record before making it STRICT all (-all). I believe my server uses multiple Ip addresses to relay emails, hence all those ip addresses must be enlisted within the record.
2018-10-31 1:53 pm
You will need to look at your WHM for the list of sites and IP addresses under your account. You will only be able to see the information under your account. If you have any further questions or comments, please let us know .
2015-11-04 5:24 pm
Sorry for the problem with the settings not apparently working. The settings are correct. The main issue is that there are some servers who not use these systems. They will only be effective with those that do use SPK and DKIM. The warnings about the authoritative nameservers can be ignored. As long as those domain names are pointed to our servers, then these settings will be valid.
You also have the option of using services like SpamCop or SpamAssassin that can help in fighting spam.
If you have any further questions or comments, please let us know.
2015-11-04 12:39 am
The above did not work and I have this information in my Cpanel
Email authentication helps to prevent spam. The options below attempt to equip email messages with verifiable information so that your server can automatically detect the nature of incoming and outgoing messages.
Enable these features to reduce the number of failed delivery notifications you receive when spammers forge messages from your domain(s). These features also stop spammers who forge messages that claim to be from your domain(s).
In order to ensure that SPF or DKIM takes effect, you must confirm that this server is an authoritative nameserver for “madnessphotography.com.au”. If you need help, contact your hosting provider.
DKIM allows your server to verify incoming email and prevent incoming spam messages. This feature ensures that incoming messages are unmodified and are genuinely from the indicated sender.
Status: Enabled WARNING: The system cannot verify that this server is an authoritative nameserver for “madnessphotography.com.au)”. [?]
Your current raw DKIM record is:
default._domainkey 14400 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaDE/cK6qPFIH7/LdEjdyWovAOPJad4gxVfCKuK81jYvrE02HNrncvifAnYeX7i+ZRZgkYSfiyDsmPKchAa9VDkFitlFM2GvsF8jP5+T9Un1Ovhf1T27rYnHtlnMzefG+q6v33e7IEZ3crAergva2srDrHdpAdKruZgBD5nWhw4KZcNMeverOTv97kTdBMXVY" jeWlVsSQO/0JLTtEBqUBt75T24SEUcVD17zMhAhuG5/kxImgNWXkF9spn9APBJrsL4DSEuIt5PAwofnWxy4ix6KreTn7OnLyiO8zGiISqCvyQyDYKWm5tWRxqiXEW/bebgNqOlFwSbyfSNqQUssIwIDAQAB\;
The SPF system allows you to authorize servers and IP addresses to send mail from your domain(s). This feature prevents outgoing spam messages.
Status: Enabled WARNING: The system cannot verify that this server is an authoritative nameserver for “madnessphotography.com.au”. [?] Disable
Your current raw SPF record is: v=spf1 +a +mx +ip4:18.104.22.168 +ip4:22.214.171.124 -all