{"id":17542,"date":"2021-01-25T18:45:11","date_gmt":"2021-01-25T18:45:11","guid":{"rendered":"https:\/\/easydmarc.com\/blog\/?p=17542"},"modified":"2026-04-09T11:25:54","modified_gmt":"2026-04-09T11:25:54","slug":"dkim-record-how-to-create-add-and-check-dkim-records","status":"publish","type":"post","link":"https:\/\/easydmarc.com\/blog\/dkim-record-how-to-create-add-and-check-dkim-records\/","title":{"rendered":"How to create, add and test DKIM records?"},"content":{"rendered":"\n

Email authentication through DKIM is no longer optional if you want your emails to reach inboxes consistently. A properly configured DKIM record helps mailbox providers verify that your messages are legitimate and haven\u2019t been altered in transit. Without it, even genuine emails can end up in spam or get rejected altogether.<\/p>\n\n\n\n

Email clients that successfully pass the DKIM check are more loyal to emails than to those that fail. At the same time, e-mail messages without DKIM headers are processed in standard mode.<\/p>\n\n\n\n

In this guide, you\u2019ll learn how to create a DKIM record, add it to DNS, test it correctly, and troubleshoot common issues.<\/p>\n\n\n\n

What are the Benefits of DKIM?<\/strong><\/h2>\n\n\n\n

A DKIM record<\/a> plays a key role in proving that your emails are legitimate and haven\u2019t been altered during transit. When DKIM is set up correctly, receiving mail servers can trust your messages more easily, which directly affects whether your emails land in the inbox, spam folder, or get rejected altogether.<\/p>\n\n\n\n

How Does DKIM Improve Email Deliverability?<\/strong><\/h3>\n\n\n\n

A cryptographic DKIM signature<\/a> is applied to every outgoing email, allowing receiving servers to verify that the message came from your domain and wasn\u2019t modified. This verification builds trust with mailbox providers, making them more likely to accept and deliver your emails to the inbox rather than filter them.<\/p>\n\n\n\n

How Does DKIM Help Prevent Email Spoofing and Phishing?<\/strong><\/h3>\n\n\n\n

By validating that an email was authorized by the sending domain, DKIM makes it harder for attackers to impersonate your brand. Even if someone tries to spoof your domain, their emails won\u2019t pass DKIM checks, helping protect recipients from phishing attempts using fake or tampered messages.<\/p>\n\n\n\n

DKIM Impact on Spam Filtering and Sender Reputation<\/strong><\/h3>\n\n\n\n

Spam filters look closely at authentication signals like DKIM to judge sender credibility. Consistently passing DKIM checks tells mailbox providers that your domain sends reliable, well-authenticated email. Over time, this strengthens your sender reputation and reduces the chances of your emails being flagged as spam.<\/p>\n\n\n\n

How to Create a DKIM Record For a Domain?<\/b><\/h2>\n\n\n\n

To create a DKIM record<\/strong>, first, list all your domains and sending services that are authorized to send emails on your behalf.<\/span><\/p>\n\n\n\n

If you\u2019re using ESPs (Email Service Providers) such as Google, Microsoft 365 and Third-Party services such as MailChimp, Sendgrid, etc. go to the given portal and create your DKIM record<\/strong> from there. Thus, these services store their DKIM Private Key in their servers. And provide DKIM Public Record to be stored in their users\u2019 DNS Zones.<\/span><\/p>\n\n\n\n

EasyDMARC has an in-built feature called <\/span><\/i>Identified Email Sources<\/i>. We identify more than 1,000 Email Sources. And provide<\/span> recommendations for SPF & DKIM implementation<\/a> redirecting to the source\u2019s official documentation.<\/span><\/i><\/p>\n\n\n

\n
\"DKIM-Identification-Configuration-DKIM-records\"<\/figure>\n<\/div>\n\n\n


DMARC Aggregate dashboard, where you can see your outgoing mail stream from various sources (<\/em>AmazonSES<\/em><\/a>, Mandrill, etc.) that your organization uses.<\/em><\/span><\/i><\/p>\n\n\n

\n
\"DKIM-AmazonSES-SPF-DMARC-DKIM-records\"<\/figure>\n<\/div>\n\n\n

AmazonSES SPF<\/a> & DKIM Configuration steps, by redirecting to their Official docs<\/span><\/i><\/p>\n\n\n\n

If your organization has its own email server, it may have native DKIM functionality. Check the available documentation for the public\/private key generation and policy record creation.

Most email service providers and tools like DKIM record generator<\/a> simplify this process by creating the DKIM record for you, without manual key handling.<\/p>\n\n\n\n

What Information is Needed to Generate a DKIM Record?<\/strong><\/h2>\n\n\n\n

To understand how to create a DKIM record, you first need a few basic details: your domain name, a DKIM selector<\/a> (used to identify the key), and the email service or sending platform you\u2019re using. EasyDMARC automatically generates this information and provides a ready-to-publish DKIM record, reducing the risk of configuration errors.<\/p>\n\n\n\n

How do DKIM Public and Private Keys Work?<\/strong><\/h3>\n\n\n\n

DKIM uses a public\u2013private key pair to sign and verify emails. The private key stays securely with your email server and signs outgoing messages. The public key is published in DNS as a DKIM record, allowing receiving servers to verify that the email hasn\u2019t been altered.<\/p>\n\n\n\n

Example of a DKIM Record<\/strong><\/h3>\n\n\n\n

Here\u2019s a clear example of a DKIM TXT record:<\/p>\n\n\n\n

selector1._domainkey.example.com\u00a0 TXT\u00a0 “v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV9d1lZf9YQ3F2XzK9F8B9pQ2GfXqE9k8F6GZ8xYxQ5nH4WcZrZkYw9xJkKp8C5vQ2kL0rFqZ3QpP5cXK0M8FQIDAQAB”<\/em><\/p>\n\n\n\n

Below is the breakdown of the elements of the example DKIM record:<\/p>\n\n\n\n