What Is DKIM?

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing messages. Receivers verify it against a public key published in your DNS.

Check Your Email Setup

How it works

  • Your sending platform signs each message with a private key.
  • The public key is published at selector._domainkey.yourdomain.
  • The receiver fetches the key and verifies the signature.
  • Unlike SPF, DKIM survives forwarding because it travels with the message.

Setting it up

  • Enable DKIM in each platform that sends as your domain — they each use their own selector.
  • Add the TXT or CNAME record the platform gives you.
  • Verify inside the platform after DNS propagates.
  • Rotate keys periodically if your provider supports it.