Login

DKIM Setup

DKIM Setup

Panel path: DNS Functions → DNS Zone Editor (TXT / _domainkey)

DKIM (DomainKeys Identified Mail) adds a digital signature to outgoing messages. Receivers verify it with a public key published as a DNS TXT record — usually under a selector like default._domainkey.

Where DKIM lives

The mail server creates a key pair. You publish the public key as a TXT record. IT Monteur / CWP may auto-create the record when the zone is hosted here — verify it exists.

Where DKIM lives
DNS Zone Editor — DKIM TXT (selector._domainkey).

How to verify or publish DKIM

  1. Open DNS Functions → DNS Zone Editor for your domain.
  2. Search for a TXT name containing _domainkey (example: default._domainkey). The value usually starts with v=DKIM1; k=rsa; p= followed by a long key.
  3. If the record is missing, ask IT Monteur support to enable/sign DKIM for the domain and send you the exact selector + TXT value (do not create a blank or guessed key).
  4. If nameservers are external, copy the same TXT host and value to Cloudflare/registrar DNS.
  5. After DNS propagates, send a test email and confirm Authentication-Results shows dkim=pass. Pair with SPF Setup and optional DMARC for best deliverability.

DMARC (recommended next step)

After SPF and DKIM pass, add a TXT at _dmarc.yourdomain.com such as v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com — then move to quarantine/reject after monitoring.

Notes

  • Changing DKIM keys without updating DNS immediately breaks signatures — coordinate with support.
  • DKIM alone does not replace SPF; publish both.

← Back to DNS Functions

Skip to content