--- title: "How to Block Spam Email in cPanel and Strengthen Email Authentication" description: "No one wants their legitimate email to be marked as spam by recipients. No one wants to receive spam in their inbox. Dealing with a blacklisted domain is time-consuming for website owners and email..." url: https://www.inmotionhosting.com/support/email/strengthen-overall-email-authentication/ date: 2018-09-25 modified: 2022-08-17 author: "InMotion Hosting Contributor" categories: ["Email"] type: post lang: en --- # How to Block Spam Email in cPanel and Strengthen Email Authentication No one wants their legitimate email to be marked as spam by recipients. No one wants to receive spam in their inbox. Dealing with a blacklisted domain is time-consuming for website owners and email subscribers. Below we cover how to improve email authentication for emails sending from your domain and server while reducing the amount of spam your email accounts receive in the inbox. - [DKIM & SPF](#spf) - [DMARC](#dmarc) - [PTR / Reverse DNS Record](#ptr) - [Spam Filters / SpamAssassin](#spamfilters) - [SpamExperts to Block Spam Remotely](#spamexperts) - [Email Filters](#filters) ## DKIM & SPF **Domain Key Identified Mail (DKIM)** and **Sender Policy Framework (SPF)** ensure an email hasn’t been modified since departing the original sender and only approved servers are sending emails from a domain respectively. You can read more about how both work to block spam [in our more in-depth article](https://www.inmotionhosting.com/support/email/spf-records-domain-keys-combating-spam/). To enable each requires the press of a button. 1. [Login cPanel](https://www.inmotionhosting.com/support/edu/cpanel/access-cpanel-via-whm/). 2. Select **Authentication**. 3. Enable **DKIM** and **SPF**. Shared Hosting customers should have +include:smtp.servconfig.com -all within your SPF record to work with SpamExperts. ### Enable DKIM & SPF by Default on VPS VPS users can set SPF and DKIM to be *enabled by default* in WHM **Tweak Settings** for newly created cPanel accounts. 1. [Login WHM](https://www.inmotionhosting.com/support/edu/whm/log-into-whm/#whm-root-access) as root. 2. Select **Tweak Settings**. 3. The easiest way to find both settings is to search “*newly created account*.” Once you Select **On** for DKIM and SPF, press **Save**.[![Enabling DKIM and SPF be default](https://www.inmotionhosting.com/support/images/stories/whm/whm-tweak-settings-1-enable-spf-dkim-new-accounts.png)](https://www.inmotionhosting.com/support/images/stories/whm/whm-tweak-settings-1-enable-spf-dkim-new-accounts.png)     ## DMARC [Domain-based Message Authentication, Reporting and Conformance (DMARC)](https://www.inmotionhosting.com/support/edu/cpanel/dmarc-setup/) ensures email is properly authenticating against DKIM and SPF standards and blocks any fraudulent activity. Its an easy way for email senders and receivers to determine whether a given message is legitimate and what to do with spam emails. For example, a strong DMARC record prevents *Mail Delivery Failed* emails stating you attempted to email accounts you’ve never emailed and that look illegitimate. 1. Login cPanel. 2. Search and select **Zone Editor**. Older cPanel accounts may instead have **Advanced Zone Editor**. 3. Select **Add Record** to create a TXT record to enter the DMARC record.Below is a basic addition added to the Zone Editor:`v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400`For the highest authentication, add the following:   `v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s;pct=100;fo=0;rf=afrf;ri=86400`[![New DMARC record in cPanel](https://www.inmotionhosting.com/support/images/stories/dns/imh-cpanel-zone-editor-4-add-dmarc.png)](https://www.inmotionhosting.com/support/images/stories/dns/imh-cpanel-zone-editor-4-add-dmarc.png)   ## PTR / Reverse DNS Record An IP address Pointer (PTR) Record looks like a subdomain but is the best way for VPS / Dedicated customers to authenticate email from your server. The PTR would replace anything using your current server hostname – cPanel / WHM URLs and email settings. For example, *vps12345.inmotionhosting.com* could become *secure.domain.com* or *semail.domain.com*. To start the process, read the section “*Changing Your Server’s Hostname*” in our [*VPS as a Mail Server* guide](https://www.inmotionhosting.com/support/email/configuring-your-vps-dedicated-server-as-a-mail-server/) and decide on a PTR name which would apply to the entire server. You should contact our Live Support for additional assistance. The PTR request takes up to 24 hours to complete. If you have issues logging into cPanel or WHM during that time, you can do so via AMP. **Note**: All above DNS changes may require ~4-24hrs for propagation. Updating the *Start of Authority (SOA)* in WHM **Edit DNS Zone** (for VPS/Reseller accounts) can also ensure DNS records update within 24 hours. ## Spam Filters / SpamAssassin SpamAssassin, or [Spam Filters on newer cPanel accounts](/support/edu/everything-email/spam-filters), filters incoming spam received by email accounts with a score rating system determining how many suspicious items are allowed in an email before marking it as junk. You can also **blacklist email addresses**. 1. Login cPanel. 2. Select **SpamAssassin** or **Spam Filters**. 3. Press **Enable** for the process and the Spam box. 4. Edit the Score settings. These changes are immediate but don’t affect already received emails. ## SpamExperts to Block Spam Remotely Shared hosting accounts can use **SpamExperts to block spam remotely** by editing your MX records in cPanel and logging into your SpamExperts account. You can read more in our [SpamExperts Education Channel](/support/email/spamexperts-mx/). **Note:** You’ll need to **contact our Live Support to enable SpamExperts** beforehand. ## Email Filters Sometimes it’s helpful to set email filters in cPanel to redirect emails to spam. Common examples include emails with explicit words or the subject *Mail Delivery Failed*. Email filters allow more customization and shouldn’t be confused with forwarders. Feel free to read [our more in-depth article](/support/email/stop-emails-being-labeled-spam/) covering how emails can be labeled as spam internally or externally by other email providers. For more information, check out our [Email Knowledge Base](https://www.inmotionhosting.com/support/email/). **Reliable Shared Hosting for Growing Businesses** Get the performance your business website demands with NVMe SSD storage, industry-standard cPanel management, and direct access to hosting experts whenever you need assistance. ![check mark](https://design.inmotionhosting.com/assets/icons/standard/check-blue.svg)Free Website Migration     ![check mark](https://design.inmotionhosting.com/assets/icons/standard/check-blue.svg)24/7 Human Support     ![check mark](https://design.inmotionhosting.com/assets/icons/standard/check-blue.svg)100% Money-Back Guarantee [Shared Hosting](https://www.inmotionhosting.com/shared-hosting?mktgp=t&irgwc=1&affiliates=5001860&utm_campaign=Jumbotron&utm_source=supportcenter&utm_medium=cta&utm_term=shared-cta2)