cPanel's Email Deliverability page auto-generates SPF + DKIM for any domain hosted with us. Open it, pick your domain, and click Repair if status is not green.
SPF
A single TXT record covering the senders allowed for your domain. cPanel sets this automatically; add include statements for external senders (Mailchimp, Resend, Postmark, etc.) yourself.
DKIM
cPanel generates the key + the TXT record. Verify with dig TXT default._domainkey.<yourdomain>.
DMARC
A policy TXT at _dmarc.<yourdomain>. Start with p=none and an rua address you actually read. Escalate to p=quarantine after a week of clean reports.