DKIM What, Why, and How to Set it up?
What is DKIM, Why DKIM, How to Setup DKIM, and How to Check if DKIM is Verified. Configuring DKIM improves your email deliverability.
Written by Rashtel Vapada · Updated over 2 weeks ago
Hello there, Isometrik users! 👋
DKIM records are part of your domain's DNS settings. You can find them in your domain provider's dashboard, whether you're using Google Domains, GoDaddy, Namecheap, or any other provider.
In this article, you'll find What DKIM is, Why it is required, plus How-to-tutorials to set up DKIM and verify DKIM records.
DKIM (DomainKeys Identified Mail)
What is DKIM?
DKIM is an email authentication method that adds a digital signature to outgoing emails. It enhances security by verifying the authenticity of the sender. This digital signature, unique to your domain, ensures that the email hasn't been tampered with during transit.
Why DKIM?
DKIM acts as the key, digitally signing your outgoing emails to ensure their authenticity & integrity. Along with SPF, it forms a robust defense against unauthorized email activity.
DKIM improves email deliverability, helps messages land in inboxes, and reduces spam flagging. Hackers constantly exploit phishing and spam, making DKIM crucial for email security.
How to Set up DKIM Records?
Important: DKIM setup is not applicable for free email accounts (e.g., gmail.com, outlook.com) but only for business emails with a custom domain (e.g., name@domain.com).
Setup steps vary by email provider. Most email providers don't even allow users to set up DKIM on their own—you often need to contact customer support or consult their FAQ/documentation.
For Google Domains/Workspace: If Google Domains is your provider, Google automatically creates a DKIM key when setting up Google Workspace. You can turn on DKIM in your Admin console.
If the DKIM record is missing, you will need to create a new TXT record in your domain's DNS manager. The examples below assume Google is the domain/mail provider and DKIM is not yet turned on in the Admin console.
Steps to Follow
- Log in to Google Admin via admin.google.com.
- Navigate in Admin Console: Menu → Apps → Google Workspace → Gmail → Authenticate email → Drop-down (Select the Domain) → Generate New Record (nothing has to be changed in the pop-up) → Generate a DKIM Key.
- Create DNS TXT record using the DKIM key from the previous step.
- For Google: Go to DNS → Manage custom records → Create New Record → Paste TXT Record Name → Type: TXT (from drop-down) → Copy TXT Value → Paste TXT Value → Save.
- For other providers: If it's not Google, go to your domain provider (e.g., GoDaddy, Squarespace, Namecheap) to set the records.
- Start Authentication: After creating the DNS TXT record, navigate back to Admin Console and click "Start Authentication."
Note: DNS changes may take up to 48 hours to fully propagate (usually they propagate in a few minutes).
How to check if an email account has DKIM set correctly?
In Isometrik Email Account Health under sequence score, you can check if DKIM is set for your connected email account or not.
A checkmark under DKIM reflects your DKIM is correctly set. ✅
Mission accomplished! You've successfully added DKIM records. 🎊
Warmest regards,
Isometrik Team