DKIM (DomainKeys Identified Mail)

Invalid or missing DomainKeys Identified Mail (DKIM) DNS records can have a negative impact on delivery rates and inbox placement.

For example, Gmail will bounce campaign emails that do not have valid DKIM signature with a key length of at least 1,048 bits.

The System Monitor will verify the DNS records for Sending Domains by checking:

• A valid DKIM public key is present.
• The DKIM key is strong enough.

Common Questions

Can I send without DKIM?

Emails will not get signed using DKIM if missing or invalid entries are detected. Email delivery will be dependant on the policies of the receiving mail server.

Many ISPs use DKIM to verify the Sending Domain used to send the email is legitimate and authorised to do so, meaning your inbox placement is likely to be affected with an incorrect or missing configuration.

What should I do if my DNS records are missing / incorrect?

All of the recommended DNS entries are provided on screen, these should be added to the sending domain in question. A PDF containing the list of identified issues and recommended DNS settings can be downloaded if it needs to be passed to another department.

Where do I change my DNS records?

The DNS entries record will need to be created on the name servers responsible for managing your domain name.

Many domain registrars provide control panels to configure the DNS on their servers, you should contact your registrar for further support.

Once the changes are made it can take 24 - 48 hours before the DNS settings have had a chance to propagate.