Adding DKIM Records

RSS

Adding DKIM Records

Last updated November 16th, 2017

DomainKeys Identified Mail (DKIM) records are used by the email receiver to verify the source of the email and detect email spoofing. It works by digitally signing each email with a private key which the receiver can verify using the public key in your DKIM record. This adds certainty that the received email is sent from the domain it claims. You can learn more about DKIM records in this Wikipedia article.

Example DKIM record.

DKIM-Signature: v=1; a=rsa-sha256; d=example.net; s=brisbane;
     c=relaxed/simple; q=dns/txt; l=1234; t=1117574938; x=1118006938;
     h=from:to:subject:date:keywords:keywords;
     bh=MTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTI=;
     b=dzdVyOfAKCdLXdJOc9G2q8LoXSlEniSbav+yuU4zGeeruD00lszZ
              VoG4ZHRNiYzR

Steps to add a DKIM record

There are two methods to add a DKIM record to your domain, a TXT record containing the DKIM value, or a CNAME alias that points to a DKIM record (provided by your email provider). SiteHost supports DKIM through a TXT record entry in our DNS Zones module.

  1. Go to the SiteHost Control Panel.
  2. Browse to DNS Zones.
  3. Select your zone name you wish to modify.
  4. Scroll down and click Add Record button to add a new record.
  5. Change the record type to TXT.
  6. If you were only given a CNAME alias by your email provider, you can find the raw DKIM record yourself, otherwise skip this step if you have the raw DKIM record.

    To find the raw DKIM record on Linux/MacOS systems, run the following command in the terminal. Replacing default.domainkey.example.com with the CNAME alias from your provider.

    $ dig +noall +answer default._domainkey.example.com TXT
    default.domainkey.example.com. 300 IN  TXT "k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kd87/UeJjenpabgbFwh+eBCsSTrqmwIYYvywlbhbqoo2DymndFkbjOVIPIldNs/m40KF+yzMn1skyoxcTUGCQs8g3FgD2Ap3ZB5DekAo5wMmk4wimDO+U8QzI3SD0" "7y2+07wlNWwIt8svnxgdxGkVbbhzY8i+RQ9DpSVpPbF7ykQxtKXkv/ahW3KjViiAH+ghvvIhkx4xYSIc9oSwVmAl5OctMEeWUwg8Istjqz8BZeTWbf41fbNhte7Y+YqZOwq1Sd0DbvYAD9NOZK9vlfuac0598HY+vtSBczUiKERHv1yRbcaQtZFh5wtiRrN04BLUTD21MycBX5jYchHjPY/wIDAQAB"
    

  7. Set the record hostname as the {signing domain}.{selector}. For the example above, set it as default._domainkey.

  8. Set the record value as the raw DKIM value, the blue text between the double quotes (").
  9. Click Save Changes and you're done!

DKIM record

Can we improve this article? Suggest an improvement to this article.

Suggest an Improvement

Thank you for helping us to improve this Knowledge Base article. Please type your suggestions below:

Still need help? Get in touch with us.

If you aren't able to find the help you need then please send us a question and we can help you further.