Email spoofing is when the sender of an email is changed to so that it appears an email is coming from someone other than the actual sender. This can be used to trick people into thinking that spam mail was coming from a legitimate source. An SPF record is a setting that requires that any email sent from your email account must have originated from your server with Web Hosting Hub, and can not be sent by a potential spammer on a different server. This can help prevent someone from spoofing your email accounts.
How do I set up an SPF Record?
Setting up an SPF record is the current standard for preventing email spoofing. Once the SPF Record is enabled, no one will be able to have email show as from your address unless it was sent from your account with Web Hosting Hub. SPF records are enabled in cPanel.
- To set up your own SPF Record, first log into your cPanel.
- Click on the Email Authentication icon under the Email section of the cPanel home page.
- On the Email Authentication page, scroll down near the bottom of the page and select the box next to All Entry (ALL):
- Scroll back up and click on the Enable button under SPF.
- On the next page you will see the confirmation message that SPF records have been enabled. Click on the Go Back link to return to the Email authentication page.
- You will see that SPF records are now enabled for your account.
**Important: You will see the following messages:
In order to ensure that SPF or DKIM takes effect, you must confirm that this server is an authoritative nameserver for example.com. If you need help, contact your hosting provider.
Warning: cPanel is unable to verify that this server is an authoritative nameserver for example.com. [?]
This is because we host your DNS on a separate server. As long as you are pointed to our Nameservers, then we are the authoritative Nameserver.
You can check your current Nameservers by performing a Whois lookup.
Enabling SPF records is one method for helping to prevent spam. If you have not enabled DomainKyes for your account as well, please see our tutorial on enabling DomainKeys.