Overview
Domain Keys Identified Mail (DKIM) is an authentication method that uses cryptography to add an encrypted digital signature to your organization's outgoing emails. Your mail server uses a private key to encrypt the email data, and receiving email servers retrieve the corresponding public key to decrypt it. This ensures that your email is genuinely sent from your domain and hasn’t been altered on its way to the recipient. It also raises your sender score, which increases the chances of your emails being delivered.
Check out the following sections to verify and configure your DKIM settings.
Verify DKIM Record
Your domain's DKIM records are typically managed by your IT department or domain administrator, but you can also check DKIM records with a tool like MX Toolbox. Just enter your domain name and the DKIM selector, then click DKIM Lookup.
Did you know? DKIM can be verified using two elements:
-
Your organization's domain name, like apollo.io.
-
A DKIM selector, which is the text added with the domain to create a unique DNS record used during DKIM. This allows different systems, date ranges, or third-party services to create different signatures.
Reach out to your IT department, domain administrator, or domain provider if you need help identifying these elements.
The lookup returns your current DKIM record configuration.
Add DKIM Record
If you've followed the steps above and found a DKIM record, there's no need to configure it any further.
If your domain doesn't have a DKIM record, your IT or domain administrator should coordinate with your domain or email provider to configure the record:
- Google Workspace:
If you're the domain administrator, be careful when you configure DKIM. Incorrect configurations can lead to your mail being undeliverable.
Using a provider other than Google or Microsoft? DKIM setup instructions depend on your domain or email provider. Reach out to your IT team or domain administrator for help.
If you use Google Workspace for your domain, Google creates a DKIM key for you and adds it in your DNS records once your site is created. Follow the instructions in Turn on DKIM for Your Domain to configure your domain for DKIM.
Next Steps
DKIM records are only one part of an email deliverability strategy. You should also set up SPF and DMARC records to further validate your organization's domain.
Check out Avoid Spam Filters for more email best practices.