Mailboxes, SPF, DKIM, DMARC, and why mail lands in junk.
Create a mailbox and open webmailCreate the mailbox in cPanel Email Accounts with its own password, then open Roundcube once. If webmail sends and a reply returns, the account works and the client…Updated Aug 29, 2026
IMAP vs POPIMAP keeps mail on the server and syncs every device. POP downloads to one client and often splits the mailbox. Use IMAP when you read mail on a…Updated Aug 29, 2026
SPF records that actually passSPF that passes is one TXT at the apex listing every real sender, ending in -all when the list is complete. Two SPF records cause a permerror, so…Updated Aug 29, 2026
DKIM: generate, publish, verifyGenerate a 2048-bit DKIM key in cPanel, publish the TXT record (often default._domainkey), then confirm dkim=pass in Authentication-Results on a message you sent.Updated Aug 29, 2026
DMARC from none to rejectStart DMARC at p=none with a rua mailbox you read, then move to quarantine, then reject. Skipping steps is how forgotten senders lose invoices and other mail.Updated Aug 29, 2026
BIMI without the hypeBIMI can show a logo only after DMARC is enforcing at quarantine or reject. It is not a deliverability fix. Finish SPF, DKIM, and DMARC first, then add…Updated Aug 29, 2026
Catch-alls and forwardersA catch-all accepts any local part and draws spam. Create a real mailbox first, forward only when needed, and leave the catch-all off so SPF and delivery stay…Updated Aug 29, 2026
Autoresponders and listscPanel autoresponders reply to inbound mail automatically. Keep them off catch-alls and list addresses, use a daily interval, and disable them when the person returns.Updated Aug 29, 2026
Mail that lands in junkMail that lands in junk is usually auth, HELO, content, or IP reputation. Fix SPF, DKIM, and DMARC first, then review the message and list.Updated Aug 29, 2026
SMTP limits and relaying deniedRelaying denied means the server refused the send, usually from missing SMTP auth, the wrong username, or a send cap. Use the full mailbox on port 587 or…Updated Aug 29, 2026
Roundcube vs a mail appRoundcube is webmail on your hosting account. A mail app uses IMAP on a phone or computer. When they disagree, trust Roundcube first, then fix the client.Updated Aug 29, 2026
Mailbox quota and MaildirMailbox quota is the disk limit on one Maildir-based email account. Learn where files live, why Trash still counts, and how to free space so new mail can…Updated Aug 29, 2026
Why SPF permerror happensAn SPF permerror means the SPF record is broken—often two TXT strings, bad syntax, or over ten DNS lookups. Receivers may treat it like fail. Merge into one…Updated Aug 29, 2026
DKIM alignment vs a passing signatureA DKIM pass means the signature verified. DKIM alignment means d= matches your From: domain. DMARC needs alignment; a vendor pass on your From: alone does not count.Updated Aug 29, 2026
Mailing lists and DMARCMailing lists that keep the original From: and add a footer break DKIM, so members bounce after p=reject. Lists that rewrite From: to the list address still work…Updated Aug 29, 2026
Changing the mail hostnamePoint mail.example.com at your server in public DNS first. AutoSSL issues a matching certificate afterward; on a VPS, HELO and PTR must agree with the name you announce.Updated Aug 29, 2026
Shared IP reputation for mailShared hosting uses common outbound IPs for mail. Authenticate with SPF, DKIM, and DMARC, and move bulk campaigns to an ESP so launches do not harm password resets.Updated Aug 29, 2026
Disable SpamAssassin or notLeave SpamAssassin on for inbound mail. Whitelist trusted senders and tune the score instead of disabling the filter globally after one false positive.Updated Aug 29, 2026
Migrating IMAP with imapsyncimapsync copies folders and flags from old IMAP to new. Run it before you flip MX, then once more for the tail so you do not lose mail…Updated Aug 29, 2026
HELO and PTR for mailHELO should resolve to your sending IP, and the PTR should match that name. Shared mail is already set; on a VPS the hostname, PTR, and A record…Updated Aug 29, 2026
Set Google Workspace MX in cPanelReplace your old MX with Google’s five records in one cPanel zone save, fix SPF for Google, and leave DKIM to Google Admin so mail does not split.Updated Aug 29, 2026