Skip to content

How to turn on DKIM signing for your domain

Security1 min readFixes check email-dkim-found

DKIM signs every message so receivers can check it came from you unchanged. Your email provider generates the key; you publish it in DNS.

Check your own domain

Our Email & DNS health tool runs this check and writes the record to add, free, in seconds.

Check your domain

What a passing site looks like

  • DKIM key: passesinfo onlyeffort M

DKIM key

Why it matters. DKIM signs every message so receivers can check it really came from you and was not changed. DKIM also keeps forwarded mail passing DMARC, which SPF alone cannot.

How to fix it.
  1. Turn on DKIM signing in your email provider (Google Workspace, Microsoft 365, your newsletter tool) and publish the key record it gives you.
  2. DKIM keys live under a selector only your provider knows; if yours is set up, this check may simply not guess its name.

Filed under Security. Copy is generated from the same catalogue that scores every report, so what you read here is what the report says.