One of the most common issues website owners face is their business emails landing in the recipient's Spam or Junk folder. This often happens because the receiving server cannot verify that the email actually came from your domain. To fix this, you must configure specific DNS entries known as SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail). These records act as a digital signature, telling the world that your hosting server is authorized to send email on your behalf.

Understanding SPF (Sender Policy Framework)

• SPF is a standard DNS TXT record that lists all the IP addresses and mail servers authorized to send email for your domain.

• When a server receives an email from you, it checks your domain's DNS for this record. If the incoming IP matches one in your SPF list, the email is considered legitimate.

• A typical SPF record looks like this: v=spf1 +a +mx +ip4:123.456.78.90 ~all. This tells the internet that your specific website IP and mail exchangers are safe senders.

Understanding DKIM (DomainKeys Identified Mail)

• While SPF checks the sender's address, DKIM checks the message integrity. It adds a cryptographic signature to your emails that is verified against a public key published in your DNS records.

• This prevents "spoofing," where hackers try to alter the content of your email while it is in transit.

• DKIM records are also TXT records, but they are much longer and contain a complex string of characters (the public key).

How to Configure These Records in cPanel

• Log in to your cPanel account and navigate to the Email section.

• Click on Email Deliverability. This tool scans your DNS settings and will alert you if your SPF or DKIM records are missing or incorrect.

• If there is an issue, click the Repair button next to your domain. The system will automatically generate the correct DNS records and add them to your zone file.

• If you are using a third-party DNS provider (like Cloudflare) instead of Sternhost's nameservers, you must manually copy the Value provided in the Email Deliverability screen and add it as a TXT record in your external DNS manager.