Domain Keys Identified Mail (DKIM) is an email authentication method that uses an encryption key and digital signature to sign your domain’s outgoing emails.
This allows a receiving server to ensure that your email is genuinely sent from your domain and that it hasn’t been altered on its way to the recipient’s inbox.
DKIM confirms your legitimacy as a sender and helps to build a good domain reputation which contributes to deliverability of your emails.
How does DKIM work
DKIM uses a pair of keys generated by your email service provider: a private and a public key.
Your email server uses a private key to encrypt and sign outgoing emails, and the receiving server checks a public key published as a DKIM record in the DNS of your domain and verifies that email is authentic.
What is a DKIM record
DKIM record is a special DNS TXT record that contains the public key.
Typically, the provider that sends your email supplies you with a DKIM record that includes a name, version, key type, and the public key itself.
Here is an example of a DKIM DNS TXT record:
snov0909._domainkey.snov.io v=DKIM1; p=76E629F05F709EF665853333EEC3F5ADE69A2362BECE40658267AB2FC3CB6CBE
The format of DKIM record is as follows:
[selector]._domainkey.[domain] v= DKIM1; p=
- [selector] is a special value issued by email service providers;
- ._domainkey. is a default part included to all DKIM’s;
- [domain] is the email’s domain name;
- v=DKIM1 indicates that this record should be seen as DKIM;
- p= contains a string of characters which represent a public key.
How to check DKIM record
You can check and confirm that your domain has a DKIM record enabled with a tool like MX Toolbox.
On the MXToolbox website, select the DKIM Lookup option and enter your domain name.
Click the button next to it to do a lookup.
How to set up DKIM for your domain
To begin, you will need to use ESP’s option to create a pair of private/public keys. And then post a public key via a TXT record in your domain’s DNS.
Here are basic steps you need to follow to set up DKIM:
Remember that it may vary depending on your DNS and ESP provider settings.
- Sign in to your ESP account.
- Generate a new DKIM record.
- Copy the given name and key values.
- Log in to your DNS hosting provider.
- Create a new record and select TXT record type.
- Add DKIM record value.
- Save changes.
If you use one these providers, you can refer to the resources below to set up or update your DKIM record.
Google Workspace:
Office 365:
Note: DKIM configuration is specific to your own domain and does not involve your Snov.io settings. We don’t have email servers so all emails are sent directly from your email provider. DKIM key is provided by your ESP, not Snov.io.
After enabling a proper DKIM record you’re one step closer to making sure your emails are delivered.
The best approach to improve your domain’s reputation and secure your email’s authenticity is to layer DKIM with SPF and DMARC.
Sorry about that 😢
How can we improve it?