What is a DKIM Record?

A DKIM (DomainKeys Identified Mail) record is a critical email authentication and security measure for your outbound emails. By adding a unique identifier to each email, DKIM ensures that your messages are verified and trusted by email servers. 

This verification process checks the DKIM signature and determines whether the email passes or fails the DKIM check. Authorized senders with a valid DKIM record can securely send emails using your domain, while unauthorized senders are blocked from bypassing your email security.

Create a DKIM record with Smartlead's free DKIM Generator to protect your domain and enhance your email deliverability. Improve your email security and make sure your messages land where they should.

How to Use the DKIM Generator?




Time to live (TTL)





Follow these steps to set up your DKIM record with Smartlead's DKIM Generator: 

1. Enter the domain name. Remember to generate a DKIM record for each domain in use, even if it doesn't handle outbound mail.

2. A DKIM selector is a unique string that helps your email server identify the correct DKIM keys. Enter an arbitrary string of characters to create the selector. Each DKIM record you generate should have a different selector to ensure accurate key identification.

3. Select the level of encryption for your DKIM key. Larger key sizes offer more security, but check your domain host's documentation for supported file sizes. For more sophisticated encryption, consult your host for additional options.

4. Our DKIM generator will create your public and private keys. Follow your provider's documentation to add these keys to your email hosting software. If you need assistance, contact your email provider for guidance on implementing DKIM.

5. Finally, use the provided selector and policy records to publish the corresponding keys. To complete the setup, add these as CNAME records within your DNS settings.

  • www is the subdomain and is an identifier of the record.

  • CNAME is the DNS record type.

  • com is the value of the record. That means www will resolve to the IP address of the domain abc.com.

  • 3600 is TTL (time to live) is the expiry time of the CNAME record. It's expressed in seconds. Here 3600 means that the records will be updated after each hour.

Frequently Asked Questions

General Questions

What is a DKIM Generator?

Email automation FAQs- Smartlead

A DKIM Generator is a tool that helps you create a unique DKIM (DomainKeys Identified Mail) record for your email domain. This record adds an extra layer of security to your email communications by generating public and private keys that authenticate your emails and protect your domain from unauthorized use.

What is a DKIM Signature?

Email automation FAQs- Smartlead

A DKIM signature is an encrypted identifier added to your outbound emails. This signature verifies that the email is genuinely from your domain and has not been tampered with during transmission. It ensures that recipients can trust the authenticity of your emails.

Is DKIM Better Than SPF?

Email automation FAQs- Smartlead

Both DKIM and SPF (Sender Policy Framework) are essential for email security, but they serve different purposes. SPF verifies the sender's IP address against a list of authorized IPs, while DKIM adds a security signature to the email itself. Using both DKIM and SPF together provides comprehensive protection for your email domain.

    Why Do I Need a DKIM Signature?

    Email automation FAQs- Smartlead

    A DKIM signature is crucial for maintaining the integrity and security of your email communications. It prevents unauthorized senders from spoofing your domain and enhances your email deliverability by ensuring that your messages pass email authentication checks. This helps maintain your domain's reputation and ensures your emails reach your recipients' inboxes.