# How to configure DKIM, SPF and DMARC authentications?

Below we will show you how to configure DKIM, SPF, and DMARC authentications.

Email authentication methods **DKIM**, **SPF**, and **DMARC** will allow you to increase the reputation and security of your sent emails.

### Accessing the Email Authentication tool:

1. Log in to your [**Client Area**](https://github.com/sitioshispanos/gitbook-helpdesk-en/blob/master/guias/client-area/accessing-client-area.md) and click on **Services**, then on **My Services**.

<figure><img src="https://github.com/sitioshispanos/gitbook-helpdesk-en/blob/master/.gitbook/assets/ClientAreaMyServices.png" alt=""><figcaption></figcaption></figure>

2. From the list of hosting plans, access the one you want to activate **Email Authentications** for.

<figure><img src="https://github.com/sitioshispanos/gitbook-helpdesk-en/blob/master/.gitbook/assets/ClientAreaChooseAccount.png" alt=""><figcaption></figcaption></figure>

3. On the new screen, in the **Actions** box on the left, you will find the option to access the **cPanel** control panel. You will also see, in the central **Technical Information** box, a direct link to the panel from your browser.

<figure><img src="https://github.com/sitioshispanos/gitbook-helpdesk-en/blob/master/.gitbook/assets/ClientAreaAccessCpanel01.png" alt=""><figcaption></figcaption></figure>

4. Once in the **cPanel** control panel, go to **Email Deliverability** under the **Email** section.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/zAVjHI0zBhhLCSqETsuF/CpanelDKIMSPF01.png" alt=""><figcaption></figcaption></figure>

5. Upon accessing the email authentications configuration screen, you will see the status of the authentications. The server will attempt to install DKIM and SPF authentications automatically.

If **DKIM** and **SPF** authentications are correctly installed, the status will show as **Valid**.

You can always modify the **DKIM** and **SPF** records from the **Manage** button on the right.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/nlljP18vpaOynOFVPDLS/CpanelDKIMSPF02.png" alt=""><figcaption></figcaption></figure>

For example, you can modify the **SPF** record from the **Customize** button. Often, various external services may require adding data to this record.

<div align="left"><figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/b8DBxIXlrQo0R2hsWeIO/CpanelDKIMSPF03.png" alt=""><figcaption></figcaption></figure></div>

### Repairing or installing Email Authentications:

If you find that one or more records (DKIM or SPF) have any issues, you will see it in the **Email Deliverability Status**.

You can automatically repair them, if possible, with the **Repair** button, or you can install them by accessing **Manage**.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/68ITjH6pUtSvCqcSxrIX/CpanelDKIMSPF04.png" alt=""><figcaption></figcaption></figure>

Managing the **DKIM** and **SPF** records will show you the status of each, and if necessary, you can install each record with the **Install Suggested Record** button.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/36EcGnb9grAO5el4FC3f/CpanelDKIMSPF05.png" alt=""><figcaption></figcaption></figure>

<div align="left"><figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/l5WzA8DwiI4BbAZ8J0Ib/CpanelDKIMSPF06.png" alt=""><figcaption></figcaption></figure></div>

### How to add and configure DMARC authentication

DMARC authentication determines what will happen to an email after it has been checked against SPF and DKIM records. The DMARC authentication configuration will determine if failure of SPF or DKIM authentications will result in the email being marked as spam, quarantined, or delivered to the recipient anyway.

The **DMARC** authentication must be added from another tool in the control panel.

1. In the **Domains** box, access **Zone Editor**.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/g8iUfofGt5KdzljQbUBx/CpanelDmarc01.png" alt=""><figcaption></figcaption></figure>

2. In the Zone Editor screen, access **Manage** for the domain you want to configure.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/7PCsM0I7Ag7hNlsXrOEz/CpanelDmarc02.png" alt=""><figcaption></figcaption></figure>

3. You will see your domain's **DNS Zone** screen. Click on the arrow in the **Add Record** menu on the right. From the dropdown menu, select **Add "DMARC" Record**.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/yho6r5MKRrWBNSDfQtO3/CpanelDmarc03.png" alt=""><figcaption></figcaption></figure>

The DMARC record with default settings will be generated. You can save this configuration directly with the **Save Record** button, or you can configure the various options of this authentication.\
\
The three main configurations of this authentication are **None**, **Quarantine**, and **Reject.**

* **None**: allows emails that do not pass DKIM and SPF authentications to be still sent.
* **Quarantine**: instructs the mail server to "quarantine" emails that fail DKIM and SPF authentications, considering them potentially spam.
* **Reject**: instructs the mail server to block emails that do not pass DKIM and SPF authentications.

<figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/r9OFvm8SgWmnfrbJiaoT/CpanelDmarc04.png" alt=""><figcaption></figcaption></figure>

4. You can further configure the behavior of the DMARC authentication by opening **Optional Parameters**. You will see these options to configure this authentication:

<div align="left"><figure><img src="https://content.gitbook.com/content/Ofi0Qrfm7RZh6yIwbvAQ/blobs/TKi5xIRanioEmjyQE8rE/CpanelDmarc05.png" alt=""><figcaption></figcaption></figure></div>

5. Once the DMARC authentication is configured, you should save the changes with the **Save Record** button.

### You can also find our tutorial on YouTube:

{% embed url="<https://www.youtube.com/watch?t=2s&v=-AcDyjeRolw>" %}