Skip to main content

How do I sign my emails with DKIM?

Learn how to set up DKIM (DomainKeys Identified Mail) for your domain to digitally sign outgoing emails, verify your sender identity, prevent spoofing, and significantly improve your overall email deliverability.

Overview and Functionality

The DKIM (DomainKeys Identified Mail) authentication method signs your outgoing emails with an invisible digital signature using a cryptographic public/private key pair.

This enables the recipient's mail server to verify whether the email truly originated from the specified sender address or if it has been forged. DKIM is a mandatory standard utilized by major email providers like Gmail and Yahoo to distinguish legitimate emails from spam or phishing attempts.

Step-by-Step Setup

  1. Add your domain: Navigate to your Email Settings and click on "Go to Domains". Here click the button "Set up new domain".

  2. Enter domain details: Enter your domain using the format mydomain.com (excluding the www prefix).

  3. Generate the DNS record: The system will generate a custom TXT record that needs to be added to your domain's DNS configuration.

  4. Publish the entry: You can add this TXT record to your DNS zone yourself through your web host's control panel, or forward the details to your system administrator or web hosting provider to complete the configuration for you.

Important Configuration Notes:

  • The appearance and terminology of DNS administration panels vary depending on your web hosting provider.

  • In general, the text record value always begins with v=DKIM1; and should be entered without quotation marks.

  • Ensure that you correctly include the required prefix/host name selector (e.g., newsletter2go._domainkey.mydomain.com).

Verification and Activation

Once the DNS record has been added, it can take up to 24 hours for the changes to take effect globally due to standard DNS propagation times.

You can check the verification status manually at any time in your Email Settings. As soon as a green checkmark appears next to your domain, your emails will be signed automatically, requiring no further manual action.

Recommendation for Maximum Deliverability: Using SPF (Sender Policy Framework), DKIM, and Sender ID jointly provides a reliable way to minimize spam classification and optimize your email deliverability. For best results, we recommend implementing all three methods. Also we recommend to setup DMARC for your Domain.

Did this answer your question?