How to Setup DKIM For Email Security in 60 Seconds

Have you ever felt like your emails are ending up in a black hole? 📩 DomainKeys Identified Mail (DKIM) is here to change that. DKIM is the trick to boost your email deliverability and defend against phishing and spoofing attacks. 

How? 

By just attaching a digital signature that proves every email truly came from you and hasn’t been tampered with along the way. 💥

Here’s your step-by-step, 60 second DKIM setup guide, powerful, and essential for email credibility.

Setting Up a DKIM Record for Any Provider Like a Pro

So, you’re ready to secure your emails with DKIM but your provider isn’t on the standard list? No worries, I’ve got you. Let’s dive into how to set up a DKIM record for any provider in just a few easy steps. 🌟

If you find yourself stuck, then you might want to speak to an email deliverability consultant who can guide you through the setup and ensure optimal performance.

Step 1: Generate Your DKIM Record 🎛️

Here’s where it starts – creating your DKIM record inside your email service provider’s account:

1. Locate DKIM Settings: 

In your ESP account, go to the domain or email authentication settings. Look for options like “DKIM Settings” or “DomainKeys.”

2. Generate a New DKIM Key:

• Click on “Generate DKIM Keys.” This will typically create a public-private key pair for your domain.

• Customisation Tip: If your ESP allows customisation, follow their guidelines for key generation.

3. Select the Key Size: 

Some ESPs let you choose an RSA key size (e.g., 1024-bit or 2048-bit). Choose based on your security requirements and the capabilities of your email recipients.

4. Specify a Selector Name: 

A selector uniquely identifies your DKIM key. Use a meaningful name to manage multiple keys efficiently.

5. Save the DKIM Key Details: 

Once generated, copy the DKIM record and selector. Save them in a secure location—you’ll need them for the DNS configuration.

6. Prepare for DNS Configuration: 

Keep your ESP tab open while you navigate to your DNS settings in a new browser tab. You’ll add your DKIM record as a TXT or CNAME record, depending on your ESP’s instructions.

Step 2: Add the DKIM Record to Your Domain’s DNS Records 🌐

Here’s where you make sure every email from your domain is stamped with authenticity.

1. Log into Your Domain Provider’s Account: 

If your DNS is managed elsewhere (like your hosting provider), go there instead.

2. Navigate to DNS Settings: 

You’ll see a list of existing DNS records.

3. Add a New Record:

When adding a DKIM record to your DNS, it’s important to identify the correct record type:

1. Choosing the Record Type for Your DKIM Record:

• CNAME Record: If the DKIM record provided by your ESP is short and looks like a pointer (e.g., s145.domainkey.u3793320.wl559.lemlist.com), it’s most likely a CNAME. This type of record redirects to another server for verification.

• TXT Record: If the DKIM record is long and contains a public key, it should be added as a TXT record. The format typically starts with v=DKIM1; k=rsa, followed by a string of characters representing the key.

2. Enter the Host/Name Field: Use your DKIM selector in the format s135._domainkey.yourdomain.com.

• Note: Some DNS providers automatically append your domain name. If this happens, enter only the selector, e.g., s135._domainkey.

3. Input the DKIM Value: Paste the DKIM record you generated earlier into the “Value” field.

4. Select Record Type: For most DKIM records, you will choose either TXT or CNAME as the record type. Use TXT for longer DKIM records and CNAME for shorter, redirected entries, as often seen in services like Salesforce and Mailchimp.

5. Save and Wait for Propagation: After saving your changes, allow 24–48 hours for DNS propagation.

6. Validate the Record: Use tools like a DKIM record lookup (such as PowerDMARC’s tool) to verify the record is correctly published. Once confirmed, you can activate DKIM signing in your email provider’s settings.

These steps ensure your DKIM setup aligns with standard practices while accounting for potential quirks in DNS configurations.

Step 3: Enable DKIM in Your ESP’s Settings 🔑

Head back to your email service provider’s tab (the one you kept open):

↝ Activate DKIM: Look for an “Enable DKIM” or just “Enable” button and click it. Boom – DKIM is now live on your ESP. 👊

Step 4: Validate Your DKIM Record ✅

DNS records don’t activate instantly. It can take up to 48 hours, but often it’s much quicker.

1. Wait a Few Hours: Give it some time, then use a DNS checker to confirm your DKIM record is active.

2. Try Our Free Deliverability Tester: It’ll show you exactly what’s up with your technical setup, including DKIM validation.

Done and Dusted!

You now have a DKIM record set up. 🎉 If everything’s gone smoothly, your emails are more secure and primed for top deliverability.

Don’t Stop There! Optimize the Full Setup 🚀

1. Set Up Your MX Records: These are crucial for receiving emails. Without them, incoming messages won’t be delivered to your inbox.

2. Add SPF and DMARC Records: These work hand-in-hand with DKIM to strengthen email security and prevent spoofing.  Learn more about how to set it up in Klaviyo How to Add SPF Record, and optimise your email authentication to safeguard your campaigns.

3. Create a Custom Tracking Domain: A custom tracking domain boosts your credibility by using your own branded domain for tracking links instead of a shared one. Here’s how to do it:

• Choose a Subdomain: Pick a subdomain like track.yourdomain.com or click.yourdomain.com. Avoid using your main domain to protect its reputation.

• Update Your DNS Settings: Access your domain provider’s DNS manager, add a CNAME record, and point it to your email service provider’s (ESP) tracking domain. For example, if you’re using a platform like Mailchimp or lemlist, they’ll provide the target domain.

• Link to Your ESP: Log into your ESP account, navigate to the tracking settings, and connect the custom domain. This process may take up to 72 hours for DNS changes to propagate.

Properly setting up a custom tracking domain enhances deliverability and ensures your emails look professional and trustworthy​

I Have a Free Hack to Get Your Emails Out of Spam Hell and Into the Inbox Where They Belong

You’re about to unlock a ridiculously powerful move. Import all your email contacts from your flows directly into free email warmup.

What happens next is pure inbox magic. Your emails go through a private network where they’re opened, marked as important, and even replied to. This isn’t just for show. It tells Google, “Hey, these emails matter!” When people are interacting, Google takes note – big time.

When you hit send on your next email campaign, your emails don’t hit the spam folder. They go directly to your customers’ inboxes – right where they should be. That means more sales, more impact, and way less spam doom.

OVERFALL FEEDBACK:

1. Brush up steps from powerdmrac

2. Use updated relevant images for the steps

3. Use the video for sell along other provided feedback

FAQs:

How do I set up a DKIM record?

Easy. Log into your email service provider, head to the domain or email authentication settings, and look for “DKIM settings.” Click on the option to generate DKIM keys, then grab your new DKIM record and pop it into your DNS settings as a TXT or CNAME record. Hit save, and you’re DKIM-ready. 💥

How do I add a DKIM signature to my email?

First, make sure DKIM is enabled in your email provider’s settings. With that done, every email you send will automatically have a DKIM signature attached. It’s all in the setup – one click, and you’re done.

How to set up DKIM on Gmail?

If you’re using Google Workspace, log into the admin console, go to “Apps,” then “Gmail,” and select “Authenticate Email.” Click “Generate New Record” to get your DKIM keys, then add the provided DKIM TXT record to your DNS. Back in the console, turn on DKIM authentication, and that’s it – Gmail’s got your back.

How do I manually set up DKIM in Office 365?

In Office 365, go to the Exchange Admin Center. Under “Protection,” select “DKIM” and then choose your domain. Click “Enable,” and Office 365 will provide the DKIM CNAME records. Add these to your DNS, go back to the DKIM settings, and hit “Activate.” Done and dusted.