OVHCloud SPF, DKIM, and DMARC Setup Guide
by
Last Updated: 6 min read
Key Takeaways
- SPF, DKIM, and DMARC are essential for OVHCloud domains to ensure inbox placement and protect against spoofing and phishing.
- OVHCloud makes DNS setup straightforward, but users should be cautious of the default SPF record containing the PTR mechanism.
- Start DMARC with p=none for safe monitoring, then gradually move to quarantine or reject to fully block impersonation attempts.
- Proper validation and DNS propagation checks are critical for all three protocols to function correctly.
- PowerDMARC simplifies verification, monitoring, and long-term email authentication management for OVHCloud users.
Adding SPF, DKIM, and DMARC to your OVHcloud domain tells mail providers which messages are authentic and which aren’t, so your legitimate emails land in the inbox, not the spam folder.
Together, these controls protect your brand from spoofing and phishing, boost your sending reputation, and increase deliverability. You can use the OVHcloud Control Panel to add the required DNS records (SPF TXT, DKIM CNAME/TXT), then monitor reports and tweak policies as your domain’s sending practices mature with PowerDMARC. Let’s dive in:
OVHCloud SPF Record Configuration: Step-by-Step
Important note: OVH uses PTR in its SPF record (the domain mentioned in OVH’s SPF configuration mx.ovh.com, contains 2 PTR mechanisms). This is something we strictly advise against. To learn more, read our detailed guide on why to avoid SPF PTR.
OVH’s SPF setup guide notes the following steps, which you can follow to set up the protocol:
Step 1: Meet the Requirements
Before you begin, make sure:
- You have access to the OVHcloud Control Panel.
- Your domain uses OVHcloud DNS servers.
- To check: Go to your domain in the Control Panel → DNS servers tab.
- If your domain uses another provider’s DNS, you’ll need to configure SPF there instead.
Step 2: Check If an SPF Record Already Exists
- Log in to your OVHcloud Control Panel.
- Switch to Web Cloud (top navigation bar).
- Go to Domain names → select your domain.
- Click the DNS zone tab.
- Look for a record that starts with v=spf1 under the Type: TXT column.
- If one exists, you can edit it instead of creating a new one (see Step 6).
Step 3: Add a New SPF Record
1. In the DNS zone tab, click Add an entry on the right.
2. In the pop-up, you’ll have three options:
-
- Option 1: Use OVHcloud SPF record → recommended if you use OVH’s email services only.
- Option 2: Add an SPF record → for custom setups (e.g., external mail servers).
- Option 3: Add a TXT record → for advanced users who already have the SPF string.
If You’re Using OVHcloud Email
If your domain uses OVHcloud’s email solutions (MX Plan, Email Pro, or Hosted Exchange):
1. Choose SPF record → then click Use the SPF for OVHcloud web hosting.
2. Click Confirm to save.
OVH automatically creates this record: v=spf1 include:mx.ovh.com ~all
1. Wait up to 24 hours for the change to take effect.
If You Want a Custom SPF Record
If you want to specify your own sending servers:
1. Choose Add an SPF record or Add a TXT record.
2. Fill out the following fields:
-
- Subdomain: (optional) Only if SPF applies to a subdomain.
- TTL: Keep default unless you want to set a custom propagation time.
- Authorise an IP address: Add your mail server’s IP (if any).
- Authorise MX servers: Check if your MX servers also send mail.
- Other authorisations: Use cautiously — only allow what you trust.
3. When done, click Next, verify details, and then Confirm.
4. Wait 4–24 hours for DNS propagation.
Modifying an Existing SPF Record
If an SPF record already exists and you just want to update it:
1. Log in to your Control Panel → Web Cloud → Domain names.
2. Select your domain → DNS zone tab.
3. Find your SPF record in the list.
4. Click the … (three dots) next to it → Edit entry.
5. Update the value as needed and Confirm.
6. Allow up to 24 hours for the update to apply.
Example SPF Configurations
For OVH shared email offers (MX Plan, Email Pro, Hosted Exchange):
mydomain.ovh IN TXT “v=spf1 include:mx.ovh.com ~all”
For OVH Private Exchange servers:
mydomain.ovh IN TXT “v=spf1 ip4:203.0.113.099 ip6:2001:db8:88:b999::1000:2233 ~all”
If you use both Private Exchange and shared OVH email:
mydomain.ovh IN TXT “v=spf1 ip4:203.0.113.099 ip6:2001:db8:88:b999::1000:2233 include:mx.ovh.com ~all”
Step 7: Wait for Propagation
- DNS changes can take 4–24 hours to take effect globally.
- You can verify your SPF setup using PowerDMARC’s SPF Record Lookup Tool.
Set up a DKIM Record Automatically for OVHCloud
According to OVHCloud’s DKIM setup guide, the following steps are involved in automatic DKIM configuration:
1. Log in to your OVHcloud Control Panel.
2. Go to Web Cloud.
3. Click MX Plan (or Exchange, depending on your solution).
4. Select the domain you want to configure.
5. Open the General information tab.
6. Look for the DKIM status box (it will be red if inactive).
7. Click the red DKIM box, then click Confirm to activate DKIM.
If your domain is not managed in the same OVHcloud account or is external
8. A window will show two CNAME records you must add to your domain’s DNS.
9. Add both CNAME records in your DNS zone and wait for DNS propagation.
10. Once propagated, return and click Enable.
Verification
11. DKIM activation can take 30 minutes to 24 hours.
12. Check the General information or Associated domains tab.
13. Green DKIM box = activated.
14. If the DKIM box is still red after 24 hours, refer to OVHcloud’s troubleshooting section.
Verify DKIM Setup
After propagation, verify your DKIM record using any DKIM lookup tool, such as PowerDMARC’s DKIM Record Lookup.
If the tool finds and validates your record, your DKIM setup for OVHcloud is complete!
Create a DMARC Record for OVHCloud
Finally, it’s time to configure your Postmark DMARC record.
1. Use our DMARC generator tool to create a new DMARC record. You should start with a p=none policy if you are just starting out. This will ensure deliverability while you monitor your reports. However, remember to upgrade to p=quarantine/reject once you are confident with your setup.
2. In your DNS provider, create a new TXT record.
3. For the Host or Name of the record, enter _dmarc
4. For the Value, paste your DMARC record, policy, and reporting address
5. Save the TXT record.
Step 4: Verify Your Setup and Monitor with PowerDMARC
For your peace of mind, after DNS propagation, use PowerDMARC’s SPF, DKIM, and DMARC checker tools for instant and accurate validation.
1. First, sign up with PowerDMARC.
2. On the sidebar on the left, navigate to Dashboard > Analysis Tools > PowerToolbox > Lookup Tools.
3. First, let’s check your DKIM record. Click on DKIM Record Lookup.
4. Enter your domain in the field and click Lookup DKIM.
5. Now, time to check the SPF record. Click on SPF Record Lookup.
6. Enter your domain and click on Lookup.
7. Now, let’s check your DMARC record. In the Lookup Tools, click on DMARC Record checker.
8. As a last step, enter your domain in the field and click Lookup.
Congratulations, you’re all set!
When you accurately configure SPF, DKIM, and DMARC for OVH, you can:
- Prevent impersonation threats by enforcing your policy
- Improve inbox placement rates and domain reputation
- Monitor your email traffic to troubleshoot deliverability issues faster
If you run into any difficulties during setup or need expert guidance, our team is here to help.
Contact us or schedule a demo with PowerDMARC to see how we can simplify your authentication process, strengthen your email security, and help you achieve flawless deliverability.
Shift Lead, Infrastructure & Email Security Expert at PowerDMARC
With over 13 years of experience in Cyber Security, Ayan Bhuiya specializes in Infrastructure, Business Continuity, Risk Management, and Email Security. Currently acting as Shift Lead at PowerDMARC. He holds a Postgraduate Diploma in Networking and Security and has a proven track record of leading strategic security initiatives to mitigate threats and ensure business resilience.
Latest posts by Ayan Bhuiya (see all)
