SPF, DKIM and DMARC are email authentication records. They help other mail providers decide whether messages from your domain are legitimate. They do not guarantee inbox placement, but without them your messages are far more likely to be rejected, quarantined or treated as suspicious.
SPF
SPF tells receiving mail servers which servers are allowed to send email for your domain. For example, if you use cPanel email, your SPF should authorise your hosting server. If you use Microsoft 365 or Google Workspace, your SPF should authorise those services.
DKIM
DKIM adds a cryptographic signature to outgoing messages. Receiving servers can verify that the message was sent by an authorised system and was not changed in transit.
DMARC
DMARC tells receiving providers what to do when SPF or DKIM checks fail. It can also send reports showing how your domain is being used.
Common mistakes
- Having more than one SPF record.
- Forgetting to update SPF after moving email provider.
- Using Microsoft 365 but leaving old cPanel mail records in place.
- Adding a strict DMARC policy before confirming mail is authenticated correctly.
Best practice
Email authentication should be checked whenever you migrate email, change DNS, move hosting, add a marketing platform or start using Microsoft 365 or Google Workspace.
Need help?
Open a support ticket directly from within your GetHosting.online customer account. Phone support is also welcome on (+44) 01457 337 247. For international contact numbers, please see our contact page.
GETHOSTING.ONLINE is a subsidiary of GetUK Support.
