What is DKIM?

DKIM stands for DomainKeys Identified Mail. It is an encryption-based authentication method used by many ISPs to verify whether an email originated from an authorized source. This technology helps protect against spammers attempting to impersonate legitimate entities.

How does DKIM work?

DKIM adds a unique signature to the header of each email sent from your domain. Here's how it functions:

1. Generating the Signature:
   • A private key generates the signature specific to your domain.
   • The signature is embedded into the email header.
2. Publishing the Public Key:
   • The corresponding public key is added to your domain's DNS records.
3. Verification by the Recipient Server:
   • When an email server receives your message, it retrieves the public key from your DNS records.
   • The server checks if the signature matches the private key:
     • If the keys match, the email is authenticated. 
     • If not, the email may be flagged as phishing or spam.

What do you need to do to enable DKIM?

To enable DKIM, follow these steps:

1. Update Your DNS Records:
   Customize your domain's DNS records with the DKIM public key. For step-by-step instructions, visit our detailed guide: SPF & DKIM Authentication.
2. Avoid Free Webmail Accounts:
   DKIM customization is not possible with free webmail accounts like Gmail, Yahoo, or Hotmail.
   • For improved deliverability and security, consider using an email address linked to your website domain.
   • Using free webmail for sending emails can impact deliverability and security. Learn more about why we advise against using free webmail services.

Why does this matter?

Implementing DKIM ensures that your emails are trusted by recipients and ISPs, improving your domain's reputation and helping your messages land in inboxes instead of spam folders.

For additional guidance or support, feel free to consult our resources or contact our support team.