Reducing spam & setting SPF/DKIM

If your business email keeps landing in the recipient's spam folder, the cause is almost always a domain that isn't properly authenticated. SPF and DKIM are the two DNS records that prove your mail is genuine, so providers like Gmail, Outlook and Yahoo trust it. The good news: Internext configures both automatically for every domain we host, so this guide is mostly about understanding and verifying them.

Why SPF and DKIM matter

Receiving mail servers are suspicious of any message that can't be verified, because spammers routinely forge sender addresses. When your domain has valid SPF and DKIM records, the receiving server can confirm the message really came from you and wasn't tampered with in transit. That trust is what moves your email from the spam folder into the inbox — and protects your domain's reputation.

SPF vs DKIM vs DMARC — in plain English

• SPF (Sender Policy Framework) is a TXT DNS record that lists which servers are allowed to send email for your domain. The receiver checks the sending server against this list.
• DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every message using a private key. The receiver verifies it against a public key in your DNS, confirming the message is authentic and unaltered.
• DMARC (Domain-based Message Authentication) is an optional policy that tells receivers what to do when a message fails SPF or DKIM, and can send you reports. It builds on top of the other two.

How to verify SPF and DKIM in cPanel

1. Log in to cPanel and, in the Email section, click Email Deliverability.
2. Find your domain in the list. Confirm the DKIM, SPF and Reverse DNS columns each show a green Valid status.
3. If any record shows a warning, click Repair or Manage — cPanel displays the exact record to add and, for domains using our nameservers, can apply it automatically.
4. Send a test message to a Gmail address, open it, click Show original, and confirm SPF: PASS and DKIM: PASS.

Tips to avoid looking like spam

• Send from your authenticated domain address, not a free Gmail or Hotmail address, for business mail.
• Keep mailbox passwords strong so your account can't be hijacked to send spam.
• Avoid all-caps subject lines, spam trigger words and sending large batches without permission.
• Include a clear unsubscribe link in any newsletter or bulk mail.

Frequently asked

Do I need to set these up myself?

No. Internext configures SPF and DKIM automatically for every hosted domain. You only need to open Email Deliverability in cPanel to confirm both show a green Valid status.

Do I also need DMARC?

DMARC is optional but recommended once SPF and DKIM are valid, especially for business domains. Our team can add a DMARC record for you on request.

Related guides