DKIM Settings
The DKIM Settings page lets you manage DKIM public key hosting and your domain's outbound signing policy. DKIM management is disabled by default and must be enabled before keys can be added.
Enabling DKIM Management
While DKIM management is disabled, the page shows DKIM Public Key Hosting is Disabled along with a What is DKIM? explanation of the protocol. Click Enable DKIM Management to turn it on.
A confirmation dialog appears headed Enable DKIM Management for [domain], explaining that enabling DKIM management lets you manage your public keys with ease. Confirm to continue.
Verification Status
Once DKIM management is enabled, a status indicator at the top of the page shows the current verification state of your domain's DKIM DNS delegation record, along with the date it was last checked. Click Verify to re-check the record immediately, or Setup Instructions to view the DNS records you need to publish.
Note: Until at least one public key is added, the status shows that setup instructions are pending.
Public Keys
The Public Keys section lists the public keys used to verify the outbound emails sent by authorized senders on behalf of your domain.
Click Add New Public Key to register a key. For a full description of each field, see Add New Public Key.
Click Import to automatically pull DKIM public keys from known DNS selectors and DMARC reporting data. Importing overwrites any existing keys configured for the same selectors.
Note: Import is only available for domains that have not yet passed DKIM verification. Once a domain is verified, the Import button is disabled.
Public Keys Table
| Column | Description |
|---|---|
| Selector | The DKIM selector that identifies this key, forming part of its DNS record name. |
| Record Type | The type of DNS record holding the key: CNAME or TXT. |
| Value | The DNS record value. A description, if one was set, is shown underneath. Keys shorter than 1024 bits display a Warning: Weak Key notice. |
| Key Length | The length of the public key, in bits. |
| TTL | Time To Live in seconds: how long DNS resolvers cache this record before re-checking. |
| Last Seen | Shown only once your domain has received DMARC reports and passed or partially passed DKIM verification. Indicates whether this key has been seen signing mail: seen (with the date), not seen in the last 6 months, or never seen. Investigate a key before removing it if it has never been seen. |
Click the pencil icon next to a key to open Edit Public Key. For details on editable fields, see Add New Public Key.
Policy Settings
After adding public keys, configure the outbound signing policy for your domain.
Outbound Signing Policy
| Option | Description |
|---|---|
| All Emails | A DKIM signature should be applied to all outbound emails from the domain. |
| Some Emails | A DKIM signature is applied to some outbound emails. Use this if only certain sending services sign with DKIM. |
Testing Mode
| Option | Description |
|---|---|
| Enabled | The DKIM policy is published in testing mode. Receiving servers are advised that the policy is being evaluated. |
| Disabled | The DKIM policy is published in production mode. |
Disabling DKIM Management
While DKIM management is enabled, the page shows DKIM Public Key Hosting is Currently Enabled. Click Disable DKIM Management to turn it off.
Note: Disabling DKIM management removes all settings and configurations for this domain, including all public keys. This action cannot be undone.
Related Topics
- Add New Public Key: Register a DKIM public key record for your domain
- What is DKIM?: An introduction to DKIM and its role in email authentication
- How Does DKIM Work?: Technical details about DKIM implementation and operation
- Why is DKIM Important?: Benefits and significance of implementing DKIM
- Limitations of DKIM: Current constraints and challenges
- DKIM Syntax: Detailed information about DKIM header fields and DNS records