Skip to main content

Set up DKIM signing

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every Broadcast you send. Mailbox providers check that signature against a public key published in your DNS to confirm the message really came from your sending domain and was not altered in transit. Signed mail is trusted more readily, which improves inbox placement.

Before you begin​

  • Admin access to your account's sending-domain settings.
  • The ability to add DNS records for your sending domain (or a colleague on your DNS/IT team who can).
  • Your sending domain already added and verified in the account (confirm the exact steps in your account).
  • Plan to keep the record in place permanently — DKIM must stay published for as long as you send from the domain.

Steps​

  1. Open your account's sending-domain (deliverability/authentication) settings and select the domain you send from.
  2. Generate the DKIM key for that domain. The platform provides a selector and a public key, presented as a DNS record to publish (confirm the exact label in your account).
  3. Copy the record. It is typically a TXT (or CNAME) record at a host like selector._domainkey.yourdomain.com.
  4. In your DNS provider, add the record exactly as shown — do not alter the value, and avoid adding line breaks or extra spaces.
  5. Save the DNS change and allow time for propagation (often minutes, but up to 24–48 hours).
  6. Return to the platform and use the Verify / Check action to confirm it can read the published key.

Result​

The domain shows a signed or verified DKIM status. New Broadcasts from that domain carry a valid DKIM signature, and message headers at the recipient show dkim=pass. Pair DKIM with SPF and a DMARC policy for the strongest authentication.

Canonical terms: Author, Edition, Folder (Project Folder), Broadcast. See the Glossary.