SPF, DKIM and DMARC for Namecheap Private Email
Short answer: Namecheap Private Email mail passes Gmail, Yahoo and Microsoft checks when you turn on DKIM with your own domain, add include:spf.privateemail.com to your one SPF record
and publish a DMARC record at _dmarc (start with p=none). The exact records and clicks are below.
| SPF | TXT at @ | v=spf1 include:spf.privateemail.com ~allNamecheap's own value is v=spf1 include:spf.privateemail.com ~all. Other senders (shop, newsletter) go into that same record. Combine with your other senders → |
|---|---|---|
| DKIM | CNAME / TXT | TXT record with the key Namecheap generates for your domain. Host name: privateemail._domainkey for plans bought on or after 2 June 2026, default._domainkey for older plans. |
| DMARC | TXT at _dmarc | v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comStart with p=none and a
mailbox you read, or a free report address that turns the reports into a dashboard; build your own. |
Step by step
- Domain on Namecheap BasicDNS? In Domain List → Manage → Mail Settings choose Private Email; Namecheap adds MX and SPF for you. Then do the DKIM and DMARC steps.
- DNS somewhere else (Cloudflare, your host)? Add two MX records at
@:mx1.privateemail.comandmx2.privateemail.com, both priority 10, and delete every other MX record. - Add the SPF include below to your one SPF record at
@. - Generate the DKIM key in your Private Email settings and add it as a TXT record at the host name for your plan (see above). Older plans can only generate it after the first mailbox exists.
- Publish DMARC at
_dmarcwithp=noneand aruaaddress on your own domain. - Records usually work within 30 minutes; then check the domain below.
Mistakes that break it
- Namecheap says DKIM is required for outgoing mail to work properly, so don't skip it.
- Copying the DKIM host from an old tutorial?
default._domainkeyis only right for plans bought before 2 June 2026. The wrong selector means DKIM fails on every message. - Some Namecheap hosting plans bundle Titan instead. MX
mx1.titan.emailmeans you need the Titan guide. - The
mail,autodiscoverandautoconfigCNAMEs only help mail apps find the settings. They don't affect delivery.
Check that it worked
After the fix, send a test email to see SPF, DKIM and DMARC pass on a real message, then keep an eye on it: free DMARC monitoring shows every service that sends mail as your domain and which ones fail, in plain English.
Get it fixed on Fiverr
Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 28-page guide, checklist, 20+ providers.
Other setup guides
Google WorkspaceMicrosoft 365Zoho MailHostinger EmailTitan EmailGoDaddy email (Microsoft 365 and Professional Email)IONOS MailProton MailCloudflare Email RoutingMailchimpSendGridAmazon SESShopify EmailKlaviyoHubSpotBrevoMailgunPostmarkZendeskConstant ContactMailerLiteKit (ConvertKit)ActiveCampaignFreshdeskIntercomZoho CampaignsHelp ScoutSquarespace Email CampaignsMailjetCampaign MonitorSalesforce Account Engagement (Pardot)Wix Email Marketing (Ascend)GorgiasSparkPostResendMailerSendElastic Email