DKIM Setup
Panel path: DNS Functions → DNS Zone Editor (TXT / _domainkey)
DKIM (DomainKeys Identified Mail) adds a digital signature to outgoing messages. Receivers verify it with a public key published as a DNS TXT record — usually under a selector like default._domainkey.
Where DKIM lives
The mail server creates a key pair. You publish the public key as a TXT record. IT Monteur / CWP may auto-create the record when the zone is hosted here — verify it exists.

How to verify or publish DKIM
-
Open DNS Functions → DNS Zone Editor for your domain.
-
Search for a TXT name containing
_domainkey(example:default._domainkey). The value usually starts withv=DKIM1; k=rsa; p=followed by a long key. -
If the record is missing, ask IT Monteur support to enable/sign DKIM for the domain and send you the exact selector + TXT value (do not create a blank or guessed key).
-
If nameservers are external, copy the same TXT host and value to Cloudflare/registrar DNS.
-
After DNS propagates, send a test email and confirm Authentication-Results shows dkim=pass. Pair with SPF Setup and optional DMARC for best deliverability.
DMARC (recommended next step)
After SPF and DKIM pass, add a TXT at _dmarc.yourdomain.com such as v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com — then move to quarantine/reject after monitoring.
Notes
- Changing DKIM keys without updating DNS immediately breaks signatures — coordinate with support.
- DKIM alone does not replace SPF; publish both.