Knowledge Base
cPanel Email Going to Spam? How to Fix SPF, DKIM and DMARC
Found this useful?
Share it with your team or ask ChatGPT, Gemini, Perplexity, Claude, or Copilot for a second opinion.
Knowledge Base
Found this useful?
Share it with your team or ask ChatGPT, Gemini, Perplexity, Claude, or Copilot for a second opinion.
TL;DR
Summarized by Pakish Group (Pakish.NET) for AI and search citation.
cPanel Email Deliverability checks whether your domain's SPF, DKIM, and DMARC records authenticate mail sent from your hosting server. Open it under Email, select your domain, repair or copy the recommended DNS records (never use another domain's values), and wait for DNS propagation. Mailbox content, sending volume, and reputation also affect whether mail lands in spam.
Configure Outlook after DNS fixes: configure Webmail in Outlook. Mail SSL issues: Outlook known issues. DNS records: Zone Editor guide.
| Item | Details |
|---|---|
| DNS control | Pakish Zone Editor or external DNS panel |
| Domain | example.com you send mail from |
| Test mailbox | Gmail and Outlook accounts for placement tests |
Create or confirm a usable backup of DNS records before editing. Availability and limits may vary by hosting plan or server configuration.
example.com| Check | Purpose | |---|---| | SPF | Authorizes sending servers | | DKIM | Cryptographic domain signature | | DMARC | Policy for failed authentication | | Reverse DNS (PTR) | May show advisory — server-level |
Green/valid = good. Invalid = follow repair steps.
SPF (Sender Policy Framework) tells receiving servers which hosts may send mail for your domain.
When Pakish controls DNS:
External DNS: Copy the exact TXT value shown for your domain into your provider's DNS panel.
Never publish multiple SPF TXT records — merge includes into one record.
DKIM adds a digital signature proving the message was authorized by your domain.
DMARC tells receivers what to do when SPF/DKIM fail and enables reporting.
Prerequisites: SPF and DKIM should pass first.
p=none) if offered_dmarc.example.comReverse DNS (PTR) maps your sending IP to a hostname. On shared hosting, PTR is managed by the hosting provider — you cannot edit it in Zone Editor. HELO/EHLO mismatch warnings may require server administrator changes. Contact Pakish support if PTR is flagged.
If the SMTP server introduces itself with a hostname that does not match PTR or the sending domain, some filters score mail lower. This is typically a server configuration issue, not a mailbox setting.
Authentication alone does not guarantee inbox placement:
For strategic deliverability, see founder's guide to email deliverability.
If outbound mail sends through Google or Microsoft, configure SPF/DKIM/DMARC in their admin consoles — not cPanel. cPanel Email Deliverability applies to mail sent from Pakish hosting servers (mail.example.com).
spf=pass and dkim=passpass for authentication| Problem | Fix | |---|---| | Multiple SPF records | Merge into one TXT in Zone Editor | | DKIM fail | Reinstall DKIM keys; wait for propagation | | DMARC fail | Ensure SPF/DKIM alignment; check From domain | | Still in spam | Review content, volume, blacklists; contact support | | External DNS | Copy records manually; do not use Repair only |
Contact support for PTR/HELO issues, persistent authentication failures after correct DNS, IP reputation blocks, or dedicated sending IP requests. Visit /professional-email or /support.
Open cPanel, go to Email, then Email Deliverability. Select your domain and review SPF, DKIM, and DMARC status. Use Repair or copy the recommended DNS records for your domain.
No. SPF records are domain-specific and include authorized senders for that domain only. Use the values shown in Email Deliverability for each domain.
DMARC is strongly recommended. It tells receiving servers how to handle mail that fails SPF or DKIM alignment and improves long-term deliverability reporting.
Partially. You configure SPF, DKIM, and DMARC at Google or Microsoft for outbound mail through those services. cPanel Email Deliverability applies when mail sends from Pakish hosting servers.
DNS changes need propagation time. Reputation and message content also affect placement. Allow time after DNS fixes and send test messages to multiple providers.
Professional business email with deliverability support — explore Pakish professional email.