Email Deliverability in cPanel: Fix SPF, DKIM and DMARC

Gmail, Outlook and other providers check every message to see whether the sending server is allowed to send for your domain. They look at three DNS records: SPF (which servers may send), DKIM (a digital signature on each message) and DMARC (what to do when the first two fail). Missing or wrong records are the most common reason your mail lands in spam. cPanel’s Email Deliverability tool checks and fixes them for you.

Check your domains

1. Log in to your FimuroHost client area at https://app.fimurohost.com.
2. Go to Services and select your cPanel Hosting plan.
3. Click Login to cPanel. cPanel opens in a new tab, already signed in.
4. In the Email section, click Email Deliverability.
5. Each domain is listed with its status. A green Valid means SPF and DKIM are correct. Problems Exist means at least one record is missing or wrong.

Repair problems automatically

1. Next to a domain with problems, click Repair.
2. cPanel shows the records it wants to install or replace. Review them, then confirm.
3. Wait a few minutes and reload the page. The status should change to Valid.

Automatic repair only works when your domain uses the nameservers from your FimuroHost welcome email, because cPanel can then change the DNS zone directly.

If your DNS is hosted elsewhere (for example Cloudflare)

1. Click Manage next to the domain.
2. In the DKIM section, copy the suggested record name (usually default._domainkey.yourdomain.com) and its long value.
3. In the SPF section, copy the suggested SPF value.
4. Add both as TXT records at your DNS provider, then return to Email Deliverability and reload to check.

Understanding SPF

A domain must have only one SPF record. It looks similar to this (your server’s real values may differ, so always use cPanel’s suggestion):

v=spf1 +a +mx +ip4:203.0.113.10 ~all

                        
                    

If you also send mail through another service (Google Workspace, Microsoft 365, a newsletter tool or a transactional mail service), include it in the same record. Click Customize in the SPF section and add the service’s domain under Include List (INCLUDE), for example _spf.google.com. Never create a second v=spf1 record: two SPF records make both invalid.

Adding DMARC

Once SPF and DKIM are valid, the Manage page offers a suggested DMARC record, which you can install with one click. If you prefer to add it yourself in Domains » Zone Editor, create a TXT record:

p=none only monitors. After a few weeks without problems, you can move to p=quarantine (failing mail goes to spam) and later p=reject. The rua address receives daily reports; make sure that mailbox exists or remove the rua part.

Reverse DNS (PTR)

The Manage page also checks the reverse DNS of the sending server. This is set by FimuroHost for the server, not by you. If it shows a problem, open a ticket and let us know.

Other things that affect deliverability

• Do not send bulk marketing mail from your hosting mailbox. Use a dedicated newsletter service and add it to your SPF record.
• Make sure website contact forms send through a real mailbox using SMTP authentication, and use your own domain in the From address.
• Avoid spammy subjects, huge images with little text and link shorteners.
• If one of your mailboxes or websites is hacked and sends spam, change its password immediately and contact us.

Need help?

If anything in this guide does not match what you see, or you get stuck, open a support ticket (choose the Support department) or message us on WhatsApp at 01818160926. Tell us your domain name and what you have tried so far, and never send your password in a ticket or chat.