How to turn on DKIM signing for your domain
DKIM signs every message so receivers can check it came from you unchanged. Your email provider generates the key; you publish it in DNS.
Check your own domain
Our Email & DNS health tool runs this check and writes the record to add, free, in seconds.
What a passing site looks like
- DKIM key: passesinfo onlyeffort M
DKIM key
Why it matters. DKIM signs every message so receivers can check it really came from you and was not changed. DKIM also keeps forwarded mail passing DMARC, which SPF alone cannot.
- Turn on DKIM signing in your email provider (Google Workspace, Microsoft 365, your newsletter tool) and publish the key record it gives you.
- DKIM keys live under a selector only your provider knows; if yours is set up, this check may simply not guess its name.