# How to turn on DKIM signing for your domain

> DKIM signs every message so receivers can check it came from you unchanged. Your email provider generates the key; you publish it in DNS.

Security · HTML version: https://getreport.app/learn/dkim

## DKIM key

Passing looks like: DKIM key passes.

**Why it matters.** DKIM signs every message so receivers can check it really came from you and was not changed. DKIM also keeps forwarded mail passing DMARC, which SPF alone cannot.

**How to fix it.**

1. Turn on DKIM signing in your email provider (Google Workspace, Microsoft 365, your newsletter tool) and publish the key record it gives you.
2. DKIM keys live under a selector only your provider knows; if yours is set up, this check may simply not guess its name.

Check your own page: https://getreport.app/