SPF / DKIM
This page explains the SPF / DKIM screen in GoAdmio. It lets you view, verify, and regenerate the SPF and DKIM records for any domain hosted on the server — the two DNS records that prove your mail server is authorized to send email for that domain.
Location: Admin Panel → Email → SPF / DKIM
Location (User Panel): Email → SPF / DKIM (if enabled for the account)
Overview
SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are the two foundational email authentication records. Together with DMARC, they determine whether receivers trust mail sent from your domain.
| Record | Type | What it does |
|---|---|---|
| SPF | TXT | Lists the servers/IPs authorized to send mail for the domain |
| DKIM | TXT | Publishes a public key that lets receivers verify the cryptographic signature on each message |
| DMARC | TXT | Tells receivers what to do when SPF/DKIM fail, and where to send reports |
Without SPF and DKIM, mail from your server is likely to land in spam, be rejected, or be spoofed by attackers.
The SPF / DKIM page in GoAdmio shows the current records for every domain on the server and lets you regenerate them if they are missing or misconfigured.
> Note: The page shows the DNS-side records. The server-side signing (DKIM signing in Postfix/OpenDKIM) is configured automatically when a domain is created. If signing keys are rotated, the DKIM record must be updated in DNS — this page helps you do that.
What the Page Shows
| Column / Field | Description |
|---|---|
| Domain | The domain whose records are shown |
| SPF Record | The current TXT record value (e.g., v=spf1 a mx include:... ~all) |
| SPF Status | Whether the record exists in DNS and matches what GoAdmio expects |
| DKIM Selector | The DKIM selector name (e.g., default, mail, goadmio) |
| DKIM Record | The TXT record value containing the public key |
| DKIM Status | Whether the record exists in DNS and matches the signing key |
| DMARC Status | Whether a DMARC record exists (if shown in your version) |
| Actions | Regenerate SPF, regenerate DKIM, verify records, copy record value |
> Tip: Status columns are the fastest way to spot domains with broken authentication. Filter by Status = Missing or Status = Mismatch to find domains that need attention.
Status Values
| Status | Meaning | Action |
|---|---|---|
| OK | Record exists in DNS and matches the expected value | None |
| Missing | No record found in DNS | Add it (see below) |
| Mismatch | Record exists but does not match the signing key or expected value | Regenerate or update |
| Multiple | More than one SPF record exists (invalid) | Merge into one |
| Invalid | Record exists but is syntactically invalid | Fix the syntax |
| Pending | Record added but DNS has not propagated yet | Wait, then re-check |
> Warning: Multiple SPF records cause receivers to fail SPF entirely (RFC 7208). If a domain has Multiple status, merge all v=spf1 records into one.
How to View SPF / DKIM for a Domain
- Log in to the GoAdmio Admin Panel (or User Panel).
- Navigate to Email → SPF / DKIM.
- Locate the domain in the list (use search/filter for large servers).
- Review the SPF Record, DKIM Selector, and DKIM Record columns.
- Check the Status columns to confirm both are valid.
Verify against live DNS
To confirm the record is actually published (not just shown in the panel), run from the shell:
```bash
SPF record
dig TXT domain.com | grep -i spf