I. What is DKIM (DomainKeys Identified Mail)?

Overview: DKIM is a verification technology to prevent email fraud. It can verify the email sending domain via message encryption and authentication.
When sending an email, the sender uses the domain’s private key to encrypt the email, generating a DKIM signature. This signature, along with its associated information, is inserted into the email header. When receiving the email, the recipient obtains the public key via a DNS query to verify the validity of the DKIM signature. This process confirms that the email has not been maliciously altered during transit, thereby ensuring the integrity of the email content.

II. Add DKIM Signatures at the Domain Service Provider

1.Requirements for obtaining DKIM record values

(1) The company-exclusive domain must be successfully associated in the Admin Console, with its status displayed as “In Use”. You can view the domain status on the company’s Admin Console page at [Collaboration -> Email -> Email domain].
(2) If the company has associated multiple dedicated domains, a corresponding DKIM record value must be generated for each domain, and configuration must be completed independently in the Admin Console of the service provider to which each domain belongs.

2.Obtain the DKIM signature

Open the company Admin Console at [Collaboration -> Emails -> Security & Management -> DKIM Verification -> Configuration].

3.Copy the information required for DKIM configuration

4.Log in to the domain service provider’s DNS console to add the record

Open the domain service provider’s console (taking Tencent Cloud as an example), click [DNS Resolution DNSPod -> Click the domain to be configured].

Click [Add Record], fill in the record value and other information, then click [Save].

5.Complete the configuration in the company Admin Console

In the company admin console, go to [Collaboration -> Emails -> Security Management -> DKIM Verification -> Configure], click “Configuration Completed. Verify Now” to finish the configuration. Once the DKIM resolution record takes effect, the status will be displayed as “Verified”.

III. FAQs

1.DKIM record value has been set, but Admin Console shows: Verifying/Invalid?

(1) Pay attention to the letter case of the generated DKIM record’s host record and record value. They must be set exactly as displayed by the system.
(2) Check if the added record value contains extra spaces. Ensure to remove any spaces within the record value.

2.How to query the DKIM record value?

You can verify it through the following two methods:
(1) Query the DKIM record on the website: https://dnschecker.org/#MX/.
Method: Open the website, enter the host record.domain (the domain to query), and select the [TXT Record] type to check.
(2) Use the nslookup command in Windows to query the DKIM record:
Windows: Type nslookup -qt=TXT host record.domain (the domain to query) and then press Enter.