Help4 Net
cPanel and forms

Make website mail identifiable and deliverable.

A website A record does not automatically authorize that server to send email. Configure the real sender, authentication, and From-domain alignment deliberately.

Choose the sending path

Authenticated mailbox SMTP

Use a real mailbox or transactional provider with TLS and authentication. This is normally more reliable than unauthenticated PHP mail.

Local cPanel delivery

If the hosting server sends directly, publish its cPanel DKIM key and include the actual outbound IP in the one SPF record.

Walkthrough

  1. Identify the sender. Determine whether WordPress, a form plugin, PHP, cPanel Exim, Google, Microsoft, or a transactional provider sends the message.
  2. Set mail routing correctly. cPanel Email Routing must match whether mailboxes are local or remote.
  3. Open Email Deliverability. Copy the domain’s current DKIM recommendation. Never replace an unrelated provider’s DKIM selector.
  4. Merge SPF. Add the hosting outbound IP only when it sends mail. Keep Google, Microsoft, and vendor includes that remain active.
  5. Use aligned From. Send from an address at the authenticated domain; place the visitor address in Reply-To.
  6. Test headers and delivery. Confirm SPF/DKIM result, DMARC alignment, queue state, and mailbox receipt.

Safe generic examples

Google mailboxes + hosting forms@ TXT "v=spf1 include:_spf.google.com ip4:HOST_OUTBOUND_IP ~all"
Microsoft mailboxes + hosting forms@ TXT "v=spf1 include:spf.protection.outlook.com ip4:HOST_OUTBOUND_IP ~all"
Local host only@ TXT "v=spf1 ip4:HOST_OUTBOUND_IP ~all"
Do not copy blindly. Remove HOST_OUTBOUND_IP unless the host sends mail, and use the actual outbound address rather than assuming it matches the website IP.

WordPress form checklist