Setting Up DKIM

Getting DKIM set up

Setting up DKIM sounds intimidating, but most email service providers make it relatively straightforward. Generally, you will:

Generate a DKIM key pair

Your email platform or server will generate a public/private key pair. The private key stays with whatever sends your email (e.g., your SMTP service or marketing platform). The public key should be added to your DNS records as a TXT record.

Publish the public key in DNS

This typically looks like a string of characters on a subdomain (called a selector, e.g., selector._domainkey.yourdomain.com). That record contains the public key.

Activate DKIM signing

In your email software, turn on DKIM signing using the generated keys. Now every outbound email gets that signature header added.

Pro Tip: Use 2048-bit keys

Many providers now recommend 2048 bits for better security (instead of older 1024-bit keys). It’s more secure and some receivers will flag weaker keys as a risk.

Combine DKIM with SPF and you’ve got two green checkmarks for every message (which DMARC can then double-confirm). That’s the foundation for inbox email deliverability.

Verify with PitchKraft

Pitchkraft lets you verify your SPF, DKIM and DMARC within the software. We strongly advise you to take advantage of that. We also ask that you verify your domain so that others can’t send emails using Pitchkraft on your behalf.

Unless you verify your domain, which is a 10-minute job, we won’t be able to let you send emails via Pitchkaft. We value your email reputation and won’t do anything which could harm it. If you have any problems or need any help or advice, just contact our support team anytime.

Continue learning

Related DKIM Authentication help and best practices.

← All DKIM Authentication guides