Domain Keys Identified Mail (DKIM) helps protect your domain from email spoofing and improves the deliverability of messages sent on your behalf.
When DKIM is enabled, outgoing messages receive a digital signature. Receiving mail servers use the DNS records you add to confirm that the messages are authorized by your domain.
Why you need to set up DKIM?
Adding DKIM can help you:
- Improve email deliverability and reduce the chance that legitimate messages are marked as spam.
- Protect your organization and customers from forged messages that appear to come from your domain.
- Build and maintain your domain’s sending reputation.
- Meet authentication requirements imposed by major email providers.
- Support DMARC, which uses DKIM and SPF results to enforce your domain’s email security policy.
Before you begin
To configure DKIM, you need:
- Access to your organization’s DNS provider.
- Permission to add or update DNS records.
- Permission to manage your domain settings in the application.
DNS changes can take time to propagate. Depending on your DNS provider, verification may not succeed immediately after the records are added.
Add your DKIM Records
- Navigate to the Enterprise Settings page.
- Under Email Domains, find the DKIM section and select Add domain.
- Enter your domain. The application will generate the DNS records required for DKIM. The domain will remain in Pending status until you verify it.
- Copy the generated DNS values.
- Sign in to your DNS provider and create the records using the displayed values. Copy each value exactly as shown, including the record type, host or name, and value or target. Do not attempt to change, shorten, or omit any part of a value.
- Save the records with your DNS provider.
- Return to the application.
Important: Select Save on the Enterprise Settings page before leaving it. If you do not save the page, your DKIM configuration and generated values will be lost.
Your DKIM configuration will remain in Pending status until you verify it. This allows time for your DNS changes to propagate before verification.
Verify your DKIM Configuration
Once you have added the records to your DNS:
- Return to the DKIM section of the Enterprise Settings page.
- Confirm that the records at your DNS provider match the values displayed in the application.
- Select Verify.
- Once verification succeeds, select Save on the Enterprise Settings page.
Important: Verification does not save the page automatically. You must select Save to retain the verified DKIM configuration.
Once the records have been found and validated, the DKIM status will change from Pending to Verified.
If Verification Fails
If the configuration remains pending or verification is unsuccessful:
- Confirm that each DNS value was copied exactly as displayed.
- Check that the record was added to the correct domain.
- Make sure the host or name was not duplicated by your DNS provider. Some providers automatically append the domain name.
- Remove any quotation marks or spaces that were not included in the displayed value.
- Allow additional time for the DNS changes to propagate, then select Verify again.
- Confirm that you saved the changes on the domain settings page.
