Skip to main content

How to Configure DKIM for Your Sending Domain - Mailchimp

Updated over a week ago

To improve your email deliverability and security, you’ll need to configure DKIM (DomainKeys Identified Mail) for your sending domain. DKIM adds cryptographic signatures to your messages, helping prevent spoofing and ensuring that your emails are trusted by recipients’ mail servers.

Step 1: Add Your Sending Domain

Before setting up DNS records, make sure you’ve already added your sending domain inside your account settings. Once added, you’ll be able to generate the required DKIM records.

How to Add a Sending Domain in Mailchimp


Step 2: Locate Your DKIM Settings

  1. Next to your sending domain, click View DKIM Settings.

  2. A modal will appear showing the exact DKIM records you need to add at your DNS provider (hosting provider, domain registrar, or DNS management service).


Step 3: Add the CNAME Records

You’ll need to add two CNAME records for DKIM authentication.

  • Record 1

    • Name/Host: mte1._domainkey.example.com

    • Value/Points to: dkim1.mandrillapp.com

  • Record 2

    • Name/Host: mte2._domainkey.example.com

    • Value/Points to: dkim2.mandrillapp.com

⚠️ Replace example.com with your actual sending domain.

Each DNS provider’s interface looks a little different. If you’re unsure how to add CNAME records, refer to your provider’s help docs or contact their support team for guidance.


Step 4: Verify Your DNS Settings

Once you’ve saved the new records:

  1. Go back to your account’s Sending Domains page.

  2. Click Test DNS Settings.

  • If everything is set up correctly, your DKIM settings will show as Valid.

  • For more details, you can click View DKIM Settings again to see the verification results.


Troubleshooting

  • DNS changes may take time:
    New records often validate within a few minutes, but changes to existing records can take longer depending on your DNS provider’s TTL (Time To Live).

  • If validation fails:

    • Double-check that the CNAME values match exactly.

    • Confirm that you replaced example.com with your actual domain.

    • Some DNS providers may require you to omit your root domain (e.g., enter mte1._domainkey instead of the full string).

  • Error details:
    You can view specific error messages inside the Sending Domains page. If you’re unsure, reach out to your DNS host’s technical support for help with formatting or propagation delays.

Did this answer your question?