TurboSMTP SPF, DKIM & DMARC Setup Guide

Key Takeaways

Authentication must be manually enabled. Before TurboSMTP will cryptographically sign your emails, you have to actively toggle Domain Authentication on inside your account settings.
SPF alignment will fail by default. TurboSMTP uses its own return path domain. This means SPF alignment will fail during a DMARC check, making DKIM configuration absolutely mandatory to pass DMARC compliance.
Merge your SPF carefully. If you already have an existing SPF record, you must add the TurboSMTP include mechanism to it. Never create a second SPF TXT record for the same domain.
Begin with a simple DMARC monitoring policy (p=none) to receive aggregate reports and review your traffic before moving to a strict enforcement policy.
Use a third-party DMARC checker tool like PowerDMARC to verify your configurations are live and functioning correctly.

If you are using TurboSMTP as your dedicated outgoing mail server to send newsletters, transactional messages, or marketing campaigns, correctly configuring your domain authentication is an essential step.

Setting up proper email authentication ensures your domain is protected from spoofing. Without these DNS records correctly in place, your campaigns run a high risk of landing in spam folders or being blocked entirely by strict inbox providers like Gmail and Yahoo.

Why Authenticate Your Domain for TurboSMTP?

TurboSMTP is a highly reliable SMTP provider built to handle bulk email delivery. When you accurately configure the necessary security protocols for your custom domain, you will see immediate benefits:

Stronger Protection: Safeguards your brand against phishing and spoofing by precisely defining who is authorized to send emails on your behalf.
Increased Deliverability: Ensures major mailbox providers trust your emails, keeping your marketing and transactional messages out of the junk folder.
Boosted Reputation: Enhances your sender score and establishes trust with global email networks while removing the “via TurboSMTP” text in your message headers.
Actionable Visibility: Grants transparent insights into who is sending emails using your domain identity.

Steps to Configure TurboSMTP SPF and DKIM Records

To begin the setup process, you will need access to your domain registrar’s DNS management panel (such as GoDaddy, Cloudflare, or Namecheap) and your TurboSMTP dashboard.

Step 1: Add Your Domain to TurboSMTP

First, you need to register your domain within the TurboSMTP platform to generate the necessary records.

1. Log in to your TurboSMTP account.

2. From the left-hand menu, navigate to Settings, then click on Sender Domain Verification.

3. Click the Add Domain button, enter your custom domain name, and save.

4. Click the Verify link next to your newly added domain. This will reveal the specific SPF and DKIM values you need to publish. Keep this window open.

Step 2: Add the SPF Record to Your DNS

An SPF record tells other email systems which servers are authorized to send email from your domain.

If you do not have an existing SPF record, log into your DNS management panel and create a new TXT record:

Type: TXT
Host/Name: @ (or your root domain)
Value: v=spf1 include:turbo-smtp.com ?all (Note: Check the exact domain provided in your portal; it may also display as spf.turbo-smtp.com)

Note: If your DNS already has an SPF record for other services like Google Workspace or Microsoft 365, do not create a second one. Simply add the TurboSMTP include statement to your existing record right before the ~all or ?all tag. For example: v=spf1 include:_spf.google.com include:turbo-smtp.com ~all

Note: If your DNS already has an SPF record for other services like Google Workspace or Microsoft 365, do not create a second one. Simply add the TurboSMTP include statement to your existing record right before the ~all or ?all tag. For example: v=spf1 include:_spf.google.com include:turbo-smtp.com ~all

If you’re managing several sending sources and getting close to the limit, our Hosted SPF solution is worth looking into, and you can check your current record with PowerDMARC’s SPF checker.

Step 3: Add the DKIM Record to Your DNS

DKIM adds a digital signature to your emails, proving they genuinely came from your company and were not tampered with during transit.
In your DNS dashboard, create another TXT record using the values provided in your TurboSMTP portal:

Type: TXT
Host/Name: turbo-smtp._domainkey
Value: k=rsa;

p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDT3MWLni6so1q9eQggRYBCLHFjohZkCnYHH8gZNDBm6zR
rodRVpWpJQW7x3cWWiuBhS1X0IfBB80l5tqFa+yc+mVgnk8tkUzOHFbPQPp4fi7egTpMtsQW/ZMrxw73SItNvPr72qvJ
TYZNPxarMx+ULjEWybcfEdXHPY8jslGcpCwIDAQAB

Save your changes. DNS modifications typically require a few hours to propagate globally.

You can check the record itself with PowerDMARC’s DKIM checker.

For more information, you can refer to TurboSMTP’s DNS record configuration guide.

Steps to Enable TurboSMTP DMARC Record

With your SPF and DKIM records published, you need to publish a DMARC record to maintain visibility over your domain. DMARC helps protect your company’s email reputation by defining how other servers should handle messages that fail security checks. Without reporting enabled, you will not know if your campaigns are failing authentication.

Use PowerDMARC’s free DMARC record generator to create a comprehensive record safely.

1. Go to PowerDMARC’s Free DMARC Record Generator tool.

2. For the Policy, select p=none (monitor-only mode). This ensures nothing gets blocked initially, allowing you time to review your email traffic before moving to enforcement.

If you need a quick explanation of the DMARC policies, here is how they work:

p=none (Monitor): Delivers all mail normally but generates reports showing who is sending email on your domain’s behalf.
p=quarantine (Soft Enforcement): Routes unauthorized emails straight to the recipient’s spam folder.
p=reject (Strict Enforcement): Blocks unauthorized emails entirely.

Important: Jumping straight to enforcement risks blocking your own legitimate business emails. Starting with p=none is essential to map out your mail flow and fix any authentication issues safely. However, staying at p=none for too long is not recommended as it leaves your domain vulnerable to phishing and impersonation threats. Move to an enforcement policy as soon as you are confident with your setup.

1. Add your dedicated IT or security email address to the Reporting field to receive your DMARC aggregate reports (rua).

2. Log in to your DNS management console and add a new record:

Type: TXT
Host/Name: _dmarc
Value: v=DMARC1; p=none; rua=mailto:[email protected];

3. Save the record.

Verify Your Setup on TurboSMTP

Step 1: Activate Authentication in TurboSMTP

For your DKIM signature to start applying to outgoing messages, you must finalize the process inside TurboSMTP.

Navigate back to Settings in your TurboSMTP portal.
Locate the DNS Records box and click the Edit button.
Click the gray toggle switch currently labeled Disabled.
Wait a few moments. Once the system confirms your DNS records are live, the switch will turn green and change to Enabled.

Step 2: Check Sender Domain Status

Return to the Sender Domain Verification page and click the Verify button next to your domain. If everything is configured correctly, a green verification badge or checkmark will appear.

Step 3: Run a Final Check with PowerDMARC

To guarantee that your DNS configuration is fully accurate and active across the globe, run an automated check:

Use PowerDMARC’s free DMARC Record Checker to verify that your record is published correctly.

What to expect in your domain health results:

DKIM: Pass / Aligned
DMARC: Policy detected
SPF: Pass

Final Words

Securing your email marketing infrastructure is critical for engaging your subscribers and protecting your brand from impersonation. If you want to take your email security further, move securely from p=none to DMARC enforcement without disrupting operations. Configure BIMI to display your logo in the inbox, and monitor your automated reports seamlessly. The PowerDMARC team is here to help.
Get in touch with us or sign up for a demo with PowerDMARC to experience the power of safer email communications firsthand!

About
Latest Posts

Ayan Bhuiya

Shift Lead, Infrastructure & Email Security Expert at PowerDMARC

With over 13 years of experience in Cyber Security, Ayan Bhuiya specializes in Infrastructure, Business Continuity, Risk Management, and Email Security. Currently acting as Shift Lead at PowerDMARC. He holds a Postgraduate Diploma in Networking and Security and has a proven track record of leading strategic security initiatives to mitigate threats and ensure business resilience.

TurboSMTP DKIM, DMARC, and SPF Setup Guide