Note: This article applies to web hosting that was purchased at mywebhostingaccount.com


Email spoofing is where spammers and scammers will forge and falsify the email sending address to make it look like it came from a certain email address, when it really did not. This is a problem if it looks like emails were sent from you when they were not. The methods below (SPF, DKIM, DMARC) help against email spoofing.



SPF


SPF verifies that the messages your domains send originated from a listed server. In addition, it provides a list of servers approved to send mail from your domains.


Setup SPF in cPanel: SPF should automatically be set up after the domain is added to cPanel and is set to use the web hosting email feature (see article: Point Domain(s) to New Web Hosting). You can view and manage SPF settings in the "Email Deliverability" section in cPanel.



DKIM


DKIM verifies the sender and the integrity of a message. In addition, it allows an email system to prove that spammers did not alter an incoming message while in transit. DKIM also verifies that the messages your domains receive come from the specified domain.


Set up DKIM in cPanel: DKIM should automatically be set up after the domain is added to cPanel and is set to use the web hosting email feature (see article: Point Domain(s) to New Web Hosting). You can view and manage DKIM settings in the "Email Deliverability" section in cPanel.




DMARC


A DMARC policy allows a sender's domain to indicate that their emails are protected by SPF and/or DKIM, and tells a receiver what to do if neither of those authentication methods pass – such as to reject the message or quarantine it. The policy can also specify how an email receiver can report back to the sender's domain about messages that pass and/or fail.


Set up DMARC in cPanel: After the domain is added to cPanel and is set to use the web hosting email feature (see article: Point Domain(s) to New Web Hosting), you can set up DMARC in cPanel from the "Zone Editor". 

    

To set up DMARC in the cPanel Zone Editor:

  • in cPanel, type in "Zone" and go to the "Zone Editor"
  • Next to the domain, click "Manage"
  • Click the down arrow next to "Add Record", then click "Add "DMARC" Record"
  • Select the policy (None, Quarantine, or Reject), and click "Optional Parameters" for more DMARC settings. Information about DMARC parameters can be seen in this cPanel Help article: cPanel: Zone Editor.