What Is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing messages. Receivers verify it against a public key published in your DNS.
Check Your Email Setup →How it works
- Your sending platform signs each message with a private key.
- The public key is published at
selector._domainkey.yourdomain. - The receiver fetches the key and verifies the signature.
- Unlike SPF, DKIM survives forwarding because it travels with the message.
Setting it up
- Enable DKIM in each platform that sends as your domain — they each use their own selector.
- Add the TXT or CNAME record the platform gives you.
- Verify inside the platform after DNS propagates.
- Rotate keys periodically if your provider supports it.