cPanel's Email Deliverability page auto-generates SPF + DKIM for any domain hosted with us. Open it, pick your domain, and click Repair if status is not green.
A single TXT record covering the senders allowed for your domain. cPanel sets this automatically; add include statements for external senders (Mailchimp, Resend, Postmark, etc.) yourself.
cPanel generates the key + the TXT record. Verify with dig TXT default._domainkey..
A policy TXT at _dmarc.. Start with p=none and an rua address you actually read. Escalate to p=quarantine after a week of clean reports.
