Autonomics AI Get a free audit

SPF, DKIM and DMARC on Namecheap

SPF, DKIM and DMARC in Namecheap's Advanced DNS, plus the Private Email specifics, including which DKIM selector your subscription uses.

On Namecheap, records go in the Advanced DNS tab. If you use Namecheap Private Email with Namecheap's BasicDNS, Namecheap adds most of them for you; check them rather than adding duplicates.

Where to add records

  1. Open Domain List and click Manage next to the domain.
  2. Go to the Advanced DNS tab.
  3. Under Host Records, click Add New Record, choose TXT Record (or CNAME), fill in Host and Value, and click the tick to save.

The Host field takes only the part before your domain: @, _dmarc, privateemail._domainkey.

Namecheap Private Email

TypeName (host)Value
TXT@v=spf1 include:spf.privateemail.com ~all

For DKIM, Namecheap generates the key in the Private Email dashboard: open Private Email, click Manage next to the domain, then Generate under DKIM (or Show DKIM to see an existing one). The host name depends on when you bought the subscription:

Subscription boughtDKIM host
On or after 2 June 2026privateemail._domainkey
Before 2 June 2026default._domainkey

On BasicDNS the TXT record should appear automatically. On Premium DNS, Web Hosting DNS or another DNS provider, add it yourself. Mail Settings for the domain should be set to Private Email so the MX records point at Namecheap.

Google Workspace, Microsoft 365 or Zoho

Set Mail Settings to Custom MX, add the provider's MX records, and then the SPF, DKIM and DMARC values from the Google, Microsoft 365 or Zoho guide.

DMARC

Once SPF and DKIM both pass, publish DMARC. Start at p=none with a report address you actually read:

TypeName (host)Value
TXT_dmarcv=DMARC1; p=none; rua=mailto:dmarc-reports@yourcompany.com

In Namecheap, Host is _dmarc. After two to four weeks of clean reports, move to p=quarantine, then p=reject. The safe route to enforcement covers what to look for.

Questions people ask

Why doesn't the checker find my Private Email DKIM key?

Run it again with the selector privateemail (or default for older subscriptions) in the optional box. If it's still missing, generate it in the Private Email dashboard.

Namecheap's email forwarding is on. Do I need SPF?

Forwarding only receives mail. If you send replies through Gmail or another service using your domain, that service needs to be in SPF and DKIM.

DNS only shows part of the picture. If mail is still landing in spam with every record right, the deliverability audit looks at the rest: blocklists, reputation, bounces, content and the sending setup.