View Categories

How to Set Up SPF, DKIM, and DMARC in cPanel (HostGator)

1 min read

HostGator uses standard cPanel authentication tools, so everything is done inside Email Deliverability and Zone Editor.


1. Log Into cPanel #

  1. Go to your HostGator cPanel login URL
    (usually https://yourdomain.com/cpanel or through the HostGator portal)
  2. Enter your username and password.

2. Open “Email Deliverability” #

  1. In cPanel, scroll down to the Email section.
  2. Click Email Deliverability.

Here you’ll see:

  • DKIM status
  • SPF status
  • Any DNS issues
  • Buttons to “Repair” or “Manage” DNS records

3. Enable and Configure DKIM #

HostGator normally pre-configures DKIM automatically for new accounts.

To check or enable: #

  1. Under Email Deliverability, find your domain.
  2. Click Manage.
  3. Look for the DKIM section.
  4. If DKIM is not active, you’ll see a recommended DNS record.
  5. Click Install the Suggested Record or Repair.

This adds a DNS TXT record similar to:

default._domainkey.yourdomain.com  
TXT: (long DKIM public key)

DKIM is now active. #


4. Enable and Configure SPF #

In the same Manage screen:

  1. Scroll to SPF.
  2. Click Install the Suggested Record or Repair.

HostGator’s default SPF looks like:

v=spf1 a mx include:websitewelcome.com ~all

If you’re using an external mailer (SMTP.com, SendGrid, Mailgun, etc.) #

Add them to SPF, for example:

v=spf1 a mx include:websitewelcome.com include:sendgrid.net ~all

Or replace/adjust based on your provider’s instructions.


5. Add DMARC Using the Zone Editor #

HostGator does NOT add DMARC automatically. You must create it manually.

Steps: #

  1. Go back to cPanel Home.
  2. Go to Zone Editor.
  3. Find your domain → click Manage.
  4. Click + Add Record → select Add TXT Record.

Enter your DMARC record: #

Name:

_dmarc.yourdomain.com

TTL: leave default (usually 14400)

Type: TXT

Record:

v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com; ruf=mailto:postmaster@yourdomain.com; fo=1

What this record does: #

  • p=none → monitoring mode only (safest to start)
  • rua / ruf → sends reports
  • fo=1 → generates forensic reports on failures

After 1–2 weeks, increase enforcement: #

Quarantine mode:

v=DMARC1; p=quarantine; pct=100; rua=mailto:postmaster@yourdomain.com

Full enforcement (prevents spoofing):

v=DMARC1; p=reject; pct=100; rua=mailto:postmaster@yourdomain.com

6. Wait for DNS Propagation #

DNS changes take:

  • 5–30 minutes (fast hosting)
  • Up to 24 hours (internet-wide)

You can check authentication status using:


7. Test Your Setup #

Send an email from your domain to:

Gmail #

Then click:
⋮ → Show original

Look for:
SPF: PASS
DKIM: PASS
DMARC: PASS


Quick Summary (Copy/Paste Checklist) #

Enable DKIM in Email Deliverability #

Enable SPF in Email Deliverability #

Add a DMARC TXT record in Zone Editor #

Verify via Gmail “Show Original” #

Wait for DNS propagation #

Leave a Reply

Your email address will not be published. Required fields are marked *