{"id":18066,"date":"2019-05-20T11:22:19","date_gmt":"2019-05-20T11:22:19","guid":{"rendered":"https:\/\/www.hostinger.com\/tutorials\/?p=18066"},"modified":"2026-07-29T14:19:04","modified_gmt":"2026-07-29T14:19:04","slug":"dkim-record","status":"publish","type":"post","link":"\/au\/tutorials\/dkim-record\/","title":{"rendered":"What is a DKIM record?"},"content":{"rendered":"<p class=\"wp-block-paragraph\">A <strong>DKIM (DomainKeys Identified Mail) record<\/strong> is a DNS TXT record that stores a public cryptographic key used to verify outgoing emails from your domain. <\/p><p class=\"wp-block-paragraph\">Receiving mail servers use the key to confirm that an email was sent by an authorized mail server and that its contents weren&rsquo;t modified after it was sent.<\/p><p class=\"wp-block-paragraph\">DKIM is one of the core email authentication standards used to prevent email spoofing and improve email deliverability. <\/p><p class=\"wp-block-paragraph\">When your mail server sends an email, it creates a unique digital signature using a private key. <\/p><p class=\"wp-block-paragraph\">The receiving mail server retrieves the corresponding public key from your domain&rsquo;s DKIM record to verify the signature before deciding whether to trust the message.<\/p><p class=\"wp-block-paragraph\">DKIM works alongside SPF (Sender Policy Framework) and DMARC (Domain-based Message Authentication, Reporting, and Conformance) to help protect your domain from impersonation attacks. <\/p><p class=\"wp-block-paragraph\">Together, these authentication methods make it easier for mailbox providers like Gmail and Outlook to distinguish legitimate emails from forged ones, helping more of your messages reach recipients&rsquo; inboxes.<\/p><h2 class=\"wp-block-heading\" id=\"h-how-does-dkim-work\">How does DKIM work?<\/h2><p class=\"wp-block-paragraph\">DKIM authentication relies on a pair of cryptographic keys: a private key that signs outgoing emails, and a public key, published in your DKIM record, that the receiving server uses to verify them. <\/p><p class=\"wp-block-paragraph\">Because the keys work together, receiving mail servers can validate the email without accessing the private key.<\/p><p class=\"wp-block-paragraph\">The diagram below illustrates the DKIM authentication process from the moment an email is sent to the point where the receiving mail server verifies its authenticity:<\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f09689\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f09689\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332558527-0.png\/public\" alt=\"Three-panel workflow showing a sending server signing an email with a private key, the signed email in transit with a DNS public key lookup, and a receiving server verifying the DKIM signature and confirming authentication.\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">DKIM authentication consists of two main stages. First, the sending mail server generates a <strong>DKIM-Signature<\/strong> header and attaches it to the email before delivery. <\/p><p class=\"wp-block-paragraph\">Then, the receiving mail server retrieves the public key from the sender&rsquo;s DKIM record and verifies the signature. <\/p><h3 class=\"wp-block-heading\">DKIM-Signature header<\/h3><p class=\"wp-block-paragraph\">Before an email leaves the sending mail server, the server uses the domain&rsquo;s private key to create a unique digital signature based on selected email headers and the message body. <\/p><p class=\"wp-block-paragraph\">The signature is then added to the email as a DKIM-Signature header.<\/p><p class=\"wp-block-paragraph\">The header stores the information that receiving mail servers need to verify the email. Instead of containing the public key itself, it includes details about the signing domain, the cryptographic algorithm used, and the location of the corresponding public key in DNS. <\/p><p class=\"wp-block-paragraph\">The receiving mail server combines this information with the public key published in your DKIM record to verify the signature.<\/p><p class=\"wp-block-paragraph\">A DKIM-Signature header consists of a series of <strong>tag=value<\/strong> pairs. The most important tags include:<\/p><figure tabindex=\"0\" class=\"wp-block-table\"><table><tbody><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>Tag<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><strong>Purpose<\/strong><\/p><\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>d=<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><span>Identifies the domain that signed the email.<\/span><\/p><\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>s=<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><span>Specifies the selector used to locate the correct DKIM record in the domain&rsquo;s DNS zone.<\/span><\/p><\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>a=<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><span>Indicates the cryptographic algorithm used to generate the signature, such as <\/span><span>rsa-sha256<\/span><span>.<\/span><\/p><\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>b=<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><span>Contains the digital signature created with the domain&rsquo;s private key.<\/span><\/p><\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\"><p><strong>bh=<\/strong><\/p><\/td><td colspan=\"1\" rowspan=\"1\"><p><span>Contains a hash of the email body, allowing the receiving server to detect whether the message was modified after it was signed.<\/span><\/p><\/td><\/tr><\/tbody><\/table><\/figure><p class=\"wp-block-paragraph\">Some DKIM signatures also include optional tags, such as <strong>t=<\/strong> for the signing timestamp and <strong>x=<\/strong> for the signature&rsquo;s expiration time. <\/p><p class=\"wp-block-paragraph\">Mail servers generate these values automatically, so you don&rsquo;t need to configure them manually.<\/p><h3 class=\"wp-block-heading\">DKIM verification<\/h3><p class=\"wp-block-paragraph\">The verification process confirms two things: the email was authorized by the sending domain, and the signed parts of the message weren&rsquo;t modified during transit.<\/p><p class=\"wp-block-paragraph\">The verification process typically follows these steps:<\/p><ol class=\"wp-block-list\">\n<li><strong>Reading the DKIM-Signature header.<\/strong> The receiving mail server identifies the signing domain (d=) and selector (s=), which indicate where to find the public key.<\/li>\n\n\n\n<li><strong>Retrieving the public key from DNS.<\/strong> Using the domain and selector, the server looks up the corresponding DKIM record. The record contains the public key needed to verify the signature.<\/li>\n\n\n\n<li><strong>Recalculating the message hash.<\/strong> The server uses the same email headers and body referenced in the DKIM-Signature header to generate a new hash.<\/li>\n\n\n\n<li><strong>Verifying the digital signature.<\/strong> The server uses the public key to verify that the signature was created with the matching private key. If the newly calculated hash matches the signed hash, the verification succeeds.<\/li>\n<\/ol><p class=\"wp-block-paragraph\">If the signature is valid, the receiving mail server knows the sending domain signed the email was signedand that the signed content hasn&rsquo;t changed since it left the sender&rsquo;s mail server. <\/p><p class=\"wp-block-paragraph\">A successful DKIM check improves the message&rsquo;s credibility and contributes to spam filtering decisions.<\/p><p class=\"wp-block-paragraph\">If verification fails, the email isn&rsquo;t automatically rejected. The receiving mail server evaluates the result alongside other authentication methods, such as SPF and DMARC, and applies the sending domain&rsquo;s DMARC policy to determine whether to deliver, quarantine, or reject the message.<\/p><h2 class=\"wp-block-heading\" id=\"h-is-dkim-really-important\">Is DKIM really important?<\/h2><p class=\"wp-block-paragraph\">Yes. DKIM matters because it protects your domain from email spoofing by allowing receiving mail servers to verify that emails were authorized by your domain and weren&rsquo;t modified after they were sent. <\/p><p class=\"wp-block-paragraph\">Without DKIM, attackers can more easily impersonate your domain to send phishing emails, scams, or other malicious messages.<\/p><p class=\"wp-block-paragraph\">For businesses, protecting a domain also means protecting the brand behind it. A valid DKIM signature makes it more difficult for attackers to impersonate your domain because they can&rsquo;t generate a matching signature without access to your private key. As a result, customers and email providers are more likely to trust messages sent from your domain.<\/p><p class=\"wp-block-paragraph\">DKIM can also <a href=\"\/au\/tutorials\/how-to-improve-email-deliverability\/\" data-wpel-link=\"internal\" rel=\"follow\">improve email deliverability<\/a>. Mailbox providers like Gmail and Outlook use email authentication as one of many signals when deciding whether to deliver a message to the inbox or mark it as spam. <\/p><p class=\"wp-block-paragraph\">Consistently sending authenticated emails helps build your domain&rsquo;s reputation over time, making legitimate messages more likely to reach recipients&rsquo; inboxes. <\/p><p class=\"wp-block-paragraph\">This is especially important for marketing campaigns, transactional emails, such as password resets and order confirmations, and other business communications that depend on timely delivery.<\/p><h2 class=\"wp-block-heading\" id=\"h-is-dkim-related-to-spf-and-dmarc\">Is DKIM related to SPF and DMARC?<\/h2><p class=\"wp-block-paragraph\"><strong>Yes.<\/strong> DKIM, SPF, and DMARC are complementary email authentication standards that work together to verify the authenticity of email messages and help prevent spoofing and phishing.<\/p><p class=\"wp-block-paragraph\"><strong>SPF <\/strong>specifies which mail servers are allowed to send emails on behalf of your domain. If an email comes from an unauthorized server, the receiving mail server can treat it as suspicious.<\/p><p class=\"wp-block-paragraph\"><strong>DMARC <\/strong>builds on SPF and DKIM. It tells receiving mail servers what to do if an email fails authentication &ndash; deliver it, send it to spam, or reject it. <\/p><p class=\"wp-block-paragraph\">DMARC can also send reports to domain owners, helping them monitor authentication failures and identify potential spoofing attempts.<\/p><p class=\"wp-block-paragraph\"><a href=\"\/au\/tutorials\/spf-dkim-dmarc-guide\/\" data-wpel-link=\"internal\" rel=\"follow\">DKIM, SPF, and DMARC<\/a> complement one another by verifying different parts of an email. Using all three standards strengthens your domain&rsquo;s reputation and <a href=\"\/au\/tutorials\/what-is-email-deliverability\/\" data-wpel-link=\"internal\" rel=\"follow\">email deliverability<\/a>.<\/p><h2 class=\"wp-block-heading\" id=\"h-how-to-add-a-dkim-record-for-emails\">How to add a DKIM record for emails<\/h2><p class=\"wp-block-paragraph\">There are three basic steps to set up DKIM: generate the DKIM keys, add the public key to the DNS server, and add the private key to the sending email server. <\/p><p class=\"wp-block-paragraph\">Most email providers that support DKIM will generate the public key to add to the domain&rsquo;s DNS record. For this, it&rsquo;s essential to have access to your DNS record.<\/p><p class=\"wp-block-paragraph\">Some email services, such as <strong>Google<\/strong> <strong>Workspace<\/strong>, generate the private key automatically and handle the signing for you; with others, you might need to generate and manage the private key yourself.<\/p><figure class=\"wp-block-image size-large\"><a class=\"hgr-tutorials-cta hgr-tutorials-cta-email-hosting\" href=\"\/au\/business-email\" target=\"_blank\" rel=\"noreferrer noopener\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"300\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2023\/02\/Email-hosting-cta-banner.png\/w=1024,h=1024,fit=scale-down\" alt=\"\" class=\"wp-image-77916\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><h3 class=\"wp-block-heading\">Adding DKIM Record Using Hostinger Mail<\/h3><p class=\"wp-block-paragraph\">Using an email service offered by web hosting providers can simplify the steps. With Hostinger Mail, simply <a href=\"\/au\/tutorials\/how-to-use-hostinger-email\/\" data-wpel-link=\"internal\" rel=\"follow\">set up a Hostinger Email mailbox<\/a>, and Hostinger Mail will automatically add the DKIM records. <\/p><p class=\"wp-block-paragraph\">1. To set up new<strong> Email Accounts<\/strong>, log into your web hosting account and click on the <strong>Manage<\/strong> button next to your domain name. From there, head to <strong>Emails &rarr;<\/strong> <strong>Email Accounts<\/strong>.<\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f0e1d1\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f0e1d1\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332578768-0.png\/public\" alt=\"hPanel highlighting Email Accounts feature\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">2. Select <strong>Manage<\/strong> next to your domain name and click on the <strong>Create email account<\/strong> button.<\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f0ebea\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f0ebea\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332582659-0.jpeg\/public\" alt=\"hPanel's Create a New Email Account button.\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">3. Fill out the form under <strong>Set Up Your Email Account<\/strong>, then click the <strong>Create<\/strong> button. <\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f0f48a\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f0f48a\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332586849-0.png\/public\" alt=\"The Set Up Your Email Account form on hPanel.\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">4. Head to <strong>DNS Settings<\/strong> and click on <strong>Set default<\/strong> next to <strong>DKIM<\/strong>. It will take up to 24 hours to propagate.<\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f0fd8f\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f0fd8f\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332591425-0.jpeg\/public\" alt=\"Set default for DKIM on hPanel.\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">5. Once the <strong>Status<\/strong> has changed to <strong>Active<\/strong>, select the <strong>arrow icon<\/strong> next to <strong>DKIM<\/strong> and click on <strong>Verify DNS<\/strong>.<\/p><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f106a2\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f106a2\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332595704-0.jpeg\/public\" alt=\"hPanel's Verify DNS button for DKIM.\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><h3 class=\"wp-block-heading\">Adding DKIM records from another email provider<\/h3><p class=\"wp-block-paragraph\">The main setup for DKIM is more or less the same with any <strong>email service provider (ESP)<\/strong>.<\/p><p class=\"wp-block-paragraph\">Popular ESPs, such as <a href=\"\/au\/business-email\" data-wpel-link=\"internal\" rel=\"follow\">Hostinger Mail<\/a> or Google Workspace, have made it easy and fast for users to add DKIM records. For this section, we will set up DKIM using <a href=\"\/au\/google-workspace\" data-wpel-link=\"internal\" rel=\"follow\">Google Workspace<\/a> as an example.<\/p><p class=\"wp-block-paragraph\">Even though Gmail signs all email messages with the default DKIM domain key, it is better to manually authenticate your email domain for an additional layer of security.<\/p><p class=\"wp-block-paragraph\">Here are the steps to set up DKIM in Google Workspace:<\/p><ol class=\"wp-block-list\">\n<li>Sign in to the Google Admin console at <strong>admin.google.com<\/strong> with a super administrator account. You need the <strong>Gmail Settings<\/strong> administrator privilege to access the DKIM configuration page.<\/li>\n\n\n\n<li>Navigate to <strong>Menu<\/strong> &rarr; <strong>Apps<\/strong> &rarr; <strong>Google Workspace<\/strong> &rarr; <strong>Gmail<\/strong>.<\/li>\n<\/ol><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f11154\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f11154\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332600280-0.png\/public\" alt=\"Google Admin console sidebar navigating to Apps, Google Workspace, and Gmail\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><ol class=\"wp-block-list\">\n<li>Click <strong>Authenticate email<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Selected domain<\/strong> menu, select the domain where you want to set up DKIM. Then hit <strong>GENERATE NEW RECORD<\/strong>.<\/li>\n<\/ol><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f11a83\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f11a83\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332604922-0.png\/public\" alt=\"Google Workspace Authenticate email page with Selected domain and DKIM status\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><ol class=\"wp-block-list\">\n<li>Select the DKIM key bit length. We recommend selecting <strong>2048<\/strong> for a more secure option. Some domains only support a 1024-bit key, so check with your domain host. The <strong>Prefix selector<\/strong> can stay as <strong>google<\/strong>. Click <strong>Generate<\/strong> to proceed.<\/li>\n<\/ol><p class=\"wp-block-paragraph\"><div class=\"announcement-block announcement-block--important\">\n            <span class=\"announcement-block__heading\">\n                <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n                    <path fill-rule=\"evenodd\" clip-rule=\"evenodd\"\n                          d=\"M12 22.5C17.799 22.5 22.5 17.799 22.5 12C22.5 6.20101 17.799 1.5 12 1.5C6.20101 1.5 1.5 6.20101 1.5 12C1.5 17.799 6.20101 22.5 12 22.5ZM13.637 7.65198C13.637 6.74791 12.9041 6.01501 12 6.01501C11.0959 6.01501 10.363 6.74791 10.363 7.65198C10.5335 9.53749 10.875 13.383 10.875 13.383C10.875 14.0043 11.3787 14.508 12 14.508C12.6213 14.508 13.125 14.0043 13.125 13.383V13.38L13.637 7.65198ZM11.9927 15.714C11.3714 15.714 10.8677 16.2177 10.8677 16.839C10.8677 17.4603 11.3714 17.964 11.9927 17.964H12.0073C12.6286 17.964 13.1323 17.4603 13.1323 16.839C13.1323 16.2177 12.6286 15.714 12.0073 15.714H11.9927Z\"\n                          fill=\"#FEA419\"\/>\n                <\/svg>\n                Important\n            <\/span>\n            <p class=\"announcement-block__content\">\n                <strong>Important!<\/strong> After you turn on Gmail for your organization, you must wait 24&ndash;72 hours before you can generate the DKIM key in the Admin console. Attempting to generate a key before this window may result in an error.\n            <\/p><\/div><\/p><ol class=\"wp-block-list\">\n<li>This will generate the TXT record value for the public key. Copy both the <strong>DNS Host name<\/strong> (TXT record name) and the <strong>TXT record value<\/strong>. Do not click <strong>START AUTHENTICATION<\/strong> yet.<\/li>\n<\/ol><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f1256c\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f1256c\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332610897-0.png\/public\" alt=\"Generated DKIM record showing DNS Host name and TXT record value\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><ol class=\"wp-block-list\">\n<li>Sign in to your domain host and go to the page where you update DNS TXT records. Add a new TXT record with the <strong>DNS Host name<\/strong> as the record name and the <strong>TXT record value<\/strong> as the record content.<\/li>\n\n\n\n<li>Head back to the Google Admin console. Navigate to <strong>Menu<\/strong> &rarr; <strong>Apps<\/strong> &rarr; <strong>Google Workspace<\/strong> &rarr; <strong>Gmail<\/strong>, then click <strong>Authenticate email<\/strong> again. Hit <strong>START AUTHENTICATION<\/strong> to turn on DKIM signing.<\/li>\n<\/ol><p class=\"wp-block-paragraph\">After adding a DKIM key, it can take up to 48 hours for DKIM authentication to start working.<\/p><ol class=\"wp-block-list\">\n<li>To verify that the DKIM security standard works, send an email message to someone who uses Gmail or Google Workspace. You cannot verify DKIM by sending yourself a test message.<\/li>\n\n\n\n<li>Access the receiving email&rsquo;s inbox and open the message. Next to <strong>Reply<\/strong>, click the three-dot menu icon on the upper right and select <strong>Show original<\/strong>.<\/li>\n\n\n\n<li>The DKIM result should display <strong>PASS<\/strong> next to your domain name, which means the domain is secure.<\/li>\n<\/ol><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f130c5\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f130c5\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332615533-0.png\/public\" alt=\"Gmail Original Message view showing DKIM PASS with domain name\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><h3 class=\"wp-block-heading\">Adding DKIM records when running a private mail server<\/h3><p class=\"wp-block-paragraph\">Running your own mail server means you generate and manage DKIM keys yourself. The standard approach uses <strong>OpenSSL<\/strong> or <strong>opendkim-genkey<\/strong> on the command line to create the key pair locally, keeping the private key off any third-party service.<\/p><p class=\"wp-block-paragraph\">Generate a 2048-bit RSA key pair with <strong>OpenSSL<\/strong> by running:<\/p><pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">openssl genrsa -out dkim-private.pem 2048\nopenssl rsa -in dkim-private.pem -pubout -outform PEM -out dkim-public.pem<\/pre><p class=\"wp-block-paragraph\">The first command creates the private key file (<strong>dkim-private.pem<\/strong>). The second extracts the matching public key (<strong>dkim-public.pem<\/strong>).<\/p><p class=\"wp-block-paragraph\">If your mail server uses <strong>OpenDKIM<\/strong> (common with Postfix), you can generate both the key and a ready-to-use DNS record in one step:<\/p><pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">opendkim-genkey -b 2048 -d domain.tld -s selector-name -D \/etc\/opendkim\/keys\/<\/pre><p class=\"wp-block-paragraph\">Replace <strong>domain.tld<\/strong> with your domain and <strong>selector-name<\/strong> with a selector of your choice, such as <strong>mail<\/strong> or <strong>default<\/strong>.<\/p><p class=\"wp-block-paragraph\">This creates two files: <strong>selector-name.private<\/strong> (the private key) and <strong>selector-name.txt<\/strong> (the DNS TXT record you can paste directly into your DNS zone).<\/p><p class=\"wp-block-paragraph\">Online DKIM key generators, such as the Port25 DKIM Wizard or EasyDMARC&rsquo;s DKIM Record Generator, are also available for quick key generation. These tools let you enter a domain name, choose a selector, and generate a key pair through a browser form.<\/p><p class=\"wp-block-paragraph\">They are useful for testing, but for production servers, generating keys locally with <strong>OpenSSL<\/strong> or <strong>opendkim-genkey<\/strong> is more secure because the private key never leaves your server.<\/p><p class=\"wp-block-paragraph\">Once the keys have been generated, add the public key to your domain&rsquo;s DNS records:<\/p><ol class=\"wp-block-list\">\n<li>Log in to your DNS management panel and create a new TXT record.<\/li>\n\n\n\n<li>Set the record name to <strong>selector-name._domainkey<\/strong> (for example, <strong>default._domainkey<\/strong>).<\/li>\n\n\n\n<li>Paste the public key as the record value. The value follows this format:<\/li>\n<\/ol><pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">v=DKIM1; k=rsa; p=MIIBIjANBgkq...<\/pre><ol class=\"wp-block-list\">\n<li>Configure your mail server to sign outgoing emails with the private key. The exact location and configuration depend on which mail transfer agent (MTA) you are running:<\/li>\n<\/ol><ul class=\"wp-block-list\">\n<li><strong>Postfix with OpenDKIM<\/strong>. Store the private key in <strong>\/etc\/opendkim\/keys\/<\/strong> and reference it in <strong>\/etc\/opendkim.conf<\/strong> using the <strong>KeyFile<\/strong> directive. Connect OpenDKIM to Postfix by adding <strong>smtpd_milters = inet:localhost:8891<\/strong> to <strong>\/etc\/postfix\/main.cf<\/strong>.<\/li>\n\n\n\n<li><strong>Exim<\/strong>. Add a DKIM transport configuration block in the Exim config pointing to the private key file.<\/li>\n\n\n\n<li><strong>PowerMTA<\/strong>. Store the private key in <strong>\/etc\/pmta\/<\/strong> (Linux) or <strong>C:pmta<\/strong> (Windows) and reference it using the <strong>domain-key<\/strong> directive in the PowerMTA config.<\/li>\n<\/ul><ol class=\"wp-block-list\">\n<li>Set restrictive file permissions on the private key so only the mail server process can read it:<\/li>\n<\/ol><pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">chmod 600 \/etc\/opendkim\/keys\/selector-name.private<\/pre><ol class=\"wp-block-list\">\n<li>Send a test email and inspect the message headers to verify the <strong>DKIM-Signature<\/strong> header is present and the receiving server reports <strong>dkim=pass<\/strong>.<\/li>\n<\/ol><div class=\"wp-block-image wp-block-image aligncenter size-large\"><figure class=\"wp-lightbox-container\" data-wp-context='{\"imageId\":\"6a6fb01f13d5f\"}' data-wp-interactive=\"core\/image\" data-wp-key=\"6a6fb01f13d5f\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2019\/05\/1785332620656-0.png\/public\" alt=\"Email headers showing the DKIM-Signature with domain and selector values\"><button class=\"lightbox-trigger\" type=\"button\" aria-haspopup=\"dialog\" data-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\" data-wp-init=\"callbacks.initTriggerButton\" data-wp-on--click=\"actions.showLightbox\" data-wp-style--right=\"state.thisImage.buttonRight\" data-wp-style--top=\"state.thisImage.buttonTop\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\"><\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div><p class=\"wp-block-paragraph\">DNS changes may take up to 48 hours to propagate.<\/p><h2 class=\"wp-block-heading\" id=\"h-what-else-can-i-do-to-secure-my-email\">What else can I do to secure my email?<\/h2><p class=\"wp-block-paragraph\">Several<a href=\"\/au\/tutorials\/email-security\/\" data-wpel-link=\"internal\" rel=\"follow\"> <\/a><a href=\"\/au\/tutorials\/email-security\/\" data-wpel-link=\"internal\" rel=\"follow\">email security practices<\/a> fill in what DKIM doesn&rsquo;t cover: pairing it with SPF and DMARC, using strong authentication, staying alert to phishing, keeping your DNS records accurate, and keeping your software up to date. <\/p><p class=\"wp-block-paragraph\">In practice, that means you should:<\/p><ul class=\"wp-block-list\">\n<li><strong>Enable SPF and DMARC.<\/strong> Together with DKIM, these authentication standards help verify your emails and protect your domain from spoofing.<\/li>\n\n\n\n<li><strong>Use strong passwords and enable multi-factor authentication (MFA).<\/strong> A unique password and MFA add an extra layer of protection, making it much harder for attackers to access your email accounts.<\/li>\n\n\n\n<li><strong>Review your DNS records regularly.<\/strong> Whenever you switch email providers or add a new email service, check that your DKIM, SPF, and DMARC records are still correct. Outdated DNS records can cause authentication failures and reduce email deliverability.<\/li>\n\n\n\n<li><strong>Keep your email software up to date.<\/strong> If you manage your own mail server or email applications, install security updates promptly to patch known vulnerabilities.<\/li>\n\n\n\n<li><strong>Be cautious with suspicious emails.<\/strong> Even with authentication in place, phishing emails can still reach inboxes. Avoid opening unexpected attachments, clicking unfamiliar links, or sharing sensitive information without verifying the sender.<\/li>\n<\/ul><p class=\"wp-block-paragraph\"><\/p><p class=\"wp-block-paragraph\"><\/p><p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A DKIM (DomainKeys Identified Mail) record is a DNS TXT record that stores a public cryptographic key used to verify outgoing emails from your domain. Receiving mail servers use the key to confirm that an email was sent by an authorized mail server and that its contents weren&rsquo;t modified after it was sent. DKIM is [&#8230;]<\/p>\n<p><a class=\"btn btn-secondary understrap-read-more-link\" href=\"\/au\/tutorials\/dkim-record\/\">Read More&#8230;<\/a><\/p>\n","protected":false},"author":530,"featured_media":145913,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"What is DKIM record? Evrything you need to know and more","rank_math_description":"What is DKIM record? Find out what it is, how it works and how to use it in email security","rank_math_focus_keyword":"what is dkim record","footnotes":""},"categories":[22636],"tags":[],"class_list":["post-18066","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-email"],"hreflangs":[{"locale":"en-US","link":"https:\/\/www.hostinger.com\/tutorials\/dkim-record\/","default":0},{"locale":"pt-BR","link":"https:\/\/www.hostinger.com\/br\/tutoriais\/o-que-e-dkim\/","default":0},{"locale":"fr-FR","link":"https:\/\/www.hostinger.com\/fr\/tutoriels\/enregistrement-dkim\/","default":0},{"locale":"es-ES","link":"https:\/\/www.hostinger.com\/es\/tutoriales\/registro-dkim\/","default":0},{"locale":"id-ID","link":"https:\/\/www.hostinger.com\/id\/tutorial\/dkim\/","default":0},{"locale":"nl-NL","link":"https:\/\/www.hostinger.com\/nl\/tutorials\/dkim-record\/","default":0},{"locale":"ja-JP","link":"https:\/\/www.hostinger.com\/jp\/tutorials\/dkim-record\/","default":0},{"locale":"ko-KR","link":"http:\/\/www.hostinger.com\/kr\/tutorials\/dkim-record\/","default":0},{"locale":"ar-AE","link":"http:\/\/www.hostinger.com\/ae\/tutorials\/dkim-record\/","default":0},{"locale":"en-PH","link":"https:\/\/www.hostinger.com\/ph\/tutorials\/dkim-record\/","default":0},{"locale":"en-MY","link":"https:\/\/www.hostinger.com\/my\/tutorials\/dkim-record\/","default":0},{"locale":"en-GB","link":"https:\/\/www.hostinger.com\/uk\/tutorials\/dkim-record\/","default":0},{"locale":"en-IN","link":"https:\/\/www.hostinger.com\/in\/tutorials\/dkim-record\/","default":0},{"locale":"en-CA","link":"https:\/\/www.hostinger.com\/ca\/tutorials\/dkim-record\/","default":0},{"locale":"en-AU","link":"https:\/\/www.hostinger.com\/au\/tutorials\/dkim-record\/","default":0},{"locale":"en-NG","link":"https:\/\/www.hostinger.com\/ng\/tutorials\/dkim-record\/","default":0},{"locale":"es-AR","link":"https:\/\/www.hostinger.com\/ar\/tutoriales\/registro-dkim\/","default":0},{"locale":"es-MX","link":"https:\/\/www.hostinger.com\/mx\/tutoriales\/registro-dkim\/","default":0},{"locale":"es-CO","link":"https:\/\/www.hostinger.com\/co\/tutoriales\/registro-dkim\/","default":0},{"locale":"pt-PT","link":"https:\/\/www.hostinger.com\/pt\/tutoriais\/o-que-e-dkim\/","default":0}],"_links":{"self":[{"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/posts\/18066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/users\/530"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/comments?post=18066"}],"version-history":[{"count":26,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/posts\/18066\/revisions"}],"predecessor-version":[{"id":145912,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/posts\/18066\/revisions\/145912"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/media\/145913"}],"wp:attachment":[{"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/media?parent=18066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/categories?post=18066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostinger.com\/au\/tutorials\/wp-json\/wp\/v2\/tags?post=18066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}