Everything you need to know about DKIM, what is DKIM record and how to add an DKIM record in your DNS hosting

DomainKeys Identified Mail (DKIM) is an email authentication protocol that verifies the authenticity of the organization delivering the email. In simple words, it prevents spammers or other malicious parties to damage a legitimate domain’s reputation.

The DKIM authentication protocol also helps prevent spam.

DKIM record explained

Here’s how it works.

DKIM authentication is 'lock and key' security for your emails. When you use DKIM authentication, your emails are encrypted, and a DKIM signature is attached to the email header.

The DKIM signature in your email header is the lock, and your DKIM record is the key. Your DKIM record is published in your domain’s DNS records.

Without properly configured DKIM records, receiving email servers can’t verify that your emails truly originated from you. As a result, they will usually reject or quarantine these emails. Improperly configured DKIM records will decrease your email deliverability.

How to create a DKIM record

Before starting to take any actions for creating a DKIM record, you first need to ensure your DKIM configuration is not already set up, especially if you work with an ESP (email service provider).

Use any of these tools to check your email domain for properly configured DKIM records:

  • DMARC Analyzer

  • MXToolbox

  • Mail Tester

  • DMARCian

If the tool returns results that a DKIM record has not been found, you will then need to either contact your IT admin or get in touch with the email provider for your domain.

In case you are interested in creating your DKIM record by yourself, we have listed two articles for you, displaying all the necessary steps based on the 2 most famous email providers:

Last updated