Mail Health Report

Fix guides › Email with your web host

Email hosted with your web host

Many small businesses get email bundled with their website hosting: cPanel hosts, SiteGround, Hostinger, Bluehost and others. These setups usually support SPF and DKIM, but they aren’t always switched on, and DMARC is rarely added for you.

Last reviewed 7 October 2026

Run the email health check first. If it shows your provider as your web host (or “Your own or your web host’s mail server”), this guide applies.

Where your DNS lives matters

The health check also shows your DNS host. There are two common situations:

  • DNS is at your web host too. The host can usually add the email records for you with a button, as below.
  • DNS is somewhere else (for example Cloudflare or your domain registrar). The host’s buttons can’t reach it, so you must copy each record from the host and add it at your DNS provider yourself. This is the most common reason these setups fail.

cPanel hosts: Email Deliverability

  1. In cPanel, open Email › Email Deliverability.
  2. Find your domain. cPanel shows the status of DKIM and SPF and whether each record is valid.
  3. If your DNS is at the same host, select Repair to install the suggested records. If your DNS is elsewhere, select Manage and copy the suggested DKIM and SPF records to your DNS provider.

cPanel normally publishes DKIM under the selector default, which our checker looks for automatically.

SiteGround

  1. In Site Tools, open Email › Authentication.
  2. Check that SPF and DKIM are on. If your domain’s DNS is with SiteGround, the records are published for you.
  3. If your DNS is elsewhere, copy the SPF and DKIM records shown there to your DNS provider.

Other hosts

Look for an Email authentication, Email deliverability or DKIM setting in your hosting control panel, or ask the host’s support for “the SPF and DKIM records for my domain”. Make sure you end up with one SPF record that includes the host’s servers.

Website contact forms

Website forms often send email using the server’s built-in mail function, which may not be covered by your SPF or signed with DKIM, so the messages land in spam. Configure your form or website to send through your mailbox using authenticated SMTP (most form plugins have an SMTP option).

Add spoofing protection (DMARC)

TypeNameValue
TXT_dmarcv=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com

Replace the address with a mailbox you read. Because web-host setups often have forgotten senders (old forms, a newsletter tool), keep it on monitor-only until reports show everything passing, then follow the none-to-reject plan.

Check your work

Run the email health check again. You’re aiming for a pass on SPF and DKIM, with DMARC on monitor-only for now.