Get a free website with any plan

See how
EMAIL

Checking SPF and DKIM with the Email Deliverability tool

IN SHORT

cPanel's Email Deliverability tool (Email section) checks a domain's SPF and DKIM DNS records against what the mail server expects, flags missing or mismatched entries, and offers a one-click fix. Flashcloud configures both records automatically, so it's mainly useful after drift or a new third-party sender.

If mail from your domain is bouncing or landing in spam and you want a fast diagnosis, go to cPanel → Email Deliverability. It checks the domain's current SPF and DKIM DNS records against what your mail server actually expects to send, flags anything missing or mismatched, and gives you a one-click button to install the correct record. For Flashcloud-hosted email, both records are usually already valid, since we configure them automatically when you add a domain. The tool is most useful when something has drifted, or when you added a third-party sender and aren't sure if it broke your setup.

Getting to the tool

Log in to your hosting's cPanel (Services → your hosting → one-click login → cPanel), then find Email Deliverability under the Email section. It lists every domain on the account with a status next to each one. A domain in good standing shows a green check. A domain with a problem shows a warning with details on what's wrong.

Reading the results

Click into a domain and you'll see two separate checks:

  • SPF: whether a valid SPF record exists at the domain's root, and whether it authorizes this mail server. A missing record shows as "not found." A record that exists but doesn't include this server shows as invalid, which usually means you have an old record from a previous host or a third-party service that was added without merging into the existing entry. Only ever run one SPF record per domain, see SPF records: what they are and how to set one up for the format and how to add a service correctly.
  • DKIM: whether a DKIM public key TXT record exists at the expected selector and matches the private key the mail server signs with. If this drifted, mail you send still gets signed, but receiving servers can't verify the signature, which quietly hurts inbox placement even though nothing looks obviously broken on your end.

Each failing check shows the exact record value the tool expects, so you can compare it against what's actually published if you want to see the difference before changing anything.

Fixing what it flags

Next to each failed check is a button to install or repair the record automatically. Clicking it writes the correct SPF or DKIM TXT record for you, no manual DNS editing required. This is the fastest fix for a Flashcloud-hosted domain that lost its record, for example after a nameserver change or a manual edit that overwrote it.

If you'd rather see or edit the record yourself first, both live in Services → your hosting → DNS Zone Editor. Look for a TXT record starting with v=spf1 for SPF, and a TXT record at a name like default._domainkey for DKIM. If you're adding a second sending service (Google Workspace, a marketing platform, a transactional email API) alongside your Flashcloud mailbox, add its SPF include to the existing record rather than letting the deliverability tool overwrite it with just this server's entry, then re-run the check to confirm it's still valid.

What this tool doesn't cover

Email Deliverability only checks SPF and DKIM. It does not check or set up DMARC, which is the record that tells receiving servers what to do when SPF or DKIM fail, and gives you visibility into who's sending mail as your domain. Once SPF and DKIM both show green here, adding DMARC is the next step. See DMARC: setup, policies, and the Gmail/Yahoo rules for how to add it without breaking legitimate mail.

It also doesn't tell you if your domain or this server's IP is on a blacklist, which is a separate problem with a separate fix. If SPF and DKIM both check out here but mail is still landing in spam or bouncing for everyone, run a blacklist check next; see Checking and delisting a blacklisted mail server.

When to contact support

If the tool's automatic fix doesn't resolve the warning, or a record shows valid here but mail is still failing authentication on the receiving end, open a ticket from Support → New ticket in the portal. Include the domain name and a screenshot of what Email Deliverability shows. A real person will check the record against what the mail server is actually sending and sort out any mismatch that isn't visible from this screen alone.

Common questions

Why is my email going to spam?

Often it's a broken or missing SPF or DKIM record. Check cPanel Email Deliverability first: a red warning there points to the exact cause, and if SPF and DKIM both show green, the next things to check are DMARC and a blacklist lookup.

How do I fix an invalid SPF record?

Open Email Deliverability, click into the domain, and use the one-click button next to the failed SPF check to install the correct record. An invalid record usually means an old entry from a previous host or a third-party service that wasn't merged into your existing SPF line, so if you're adding a new sender, add its include to the existing record instead of letting the tool overwrite it.

What does it mean if DKIM shows invalid or drifted?

It means the DKIM public key TXT record doesn't match the private key your mail server signs with. Mail still goes out signed, but receiving servers can't verify it, which quietly hurts inbox placement even though nothing looks broken on your end.

Does this tool check for blacklisted IPs or set up DMARC?

No. Email Deliverability only checks SPF and DKIM. For DMARC, add it once both show green here; for spam or bounce problems after SPF and DKIM check out, run a separate blacklist check.

What if the automatic fix doesn't work?

Open a ticket from Support, New ticket, and include the domain name and a screenshot of what Email Deliverability shows. Support will check the record against what the mail server is actually sending and sort out any mismatch that isn't visible from that screen.

CAN'T FIND IT?

Real humans answer fast.

Hosting with us? Open a ticket and a real person replies - no scripts, no upsells. Still choosing a host? The same team is included with every plan, from day one.