Steps
- 1
If the domain uses our nameservers DKIM is usually added automatically - check “Email Deliverability” in cPanel.
- 2
If DNS is elsewhere: copy the DKIM record value (from Email Deliverability or your panel's DKIM keys page).
- 3
Add a TXT record with the name the panel shows (such as default._domainkey or x._domainkey) and paste the value as is.
- 4
Add a DMARC TXT record named _dmarc and start with monitoring: v=DMARC1; p=none; rua=mailto:your-address
- 5
Once your legitimate mail passes, tighten the policy gradually to quarantine and then reject.
Notes
- Do not double the quotes - some DNS providers (such as Cloudflare) add them automatically.
- Some providers limit TXT length - a long key can be split into several strings within the same record.
Useful links
Source: cPanel Docs - Email Deliverability · DMARC.org - Overview · مكتبة شروحات مازن هوست / MazinHost knowledge base