Why your emails go to spam (SPF, DKIM, DMARC)
Three DNS records that tell Gmail, Outlook, and Yahoo that your mail is real. Set them up once, fix deliverability for good.
If your emails keep landing in the spam folder, the cause is almost always the same: Gmail and Outlook cannot tell if the email is really from you. Three DNS records fix this.
SPF
SPF says which servers are allowed to send email for your domain. A basic record looks like this:
v=spf1 +a +mx include:_spf.nakroteck.net ~all
Add it as a TXT record on the root of your domain. Only one SPF record per domain is allowed, so if you already have one, extend that record instead of adding a second.
DKIM
DKIM signs every email with a private key on the server. Recipients check the matching public key in your DNS to prove the mail was not tampered with in transit.
In cPanel, go to Email Deliverability, find your domain, and copy the DKIM record we generate. Add it as a TXT record at the suggested name (usually default._domainkey).
DMARC
DMARC tells receivers what to do when SPF or DKIM fail. A sensible starter record:
v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com
Add it as a TXT record at _dmarc.yourdomain.com. Start with p=none so you can monitor reports. Move to p=quarantine or p=reject once you are confident everything is signed.
Test your setup
Send an email from your Nakroteck mailbox to check-auth@verifier.port25.com. Within a minute it replies with a report showing SPF, DKIM, and DMARC results. All three should say pass.
Was this article helpful?
Still need help?
If this article did not solve it, open a support ticket and we will see which article you already checked.