DKIM helps to verify the sender of an email and check if any alterations are made to the email in transit. Setting up DKIM record for your domain will help prevent your emails from going to spam at the recipient end. The below article will help you understand the importance of DKIM and how you can set it up for your Neo domain.
Learn more about DKIM records:
- What is DKIM record?
- How does DKIM work?
- Generate Custom DKIM record on Neo
- Add DKIM record to domain's DNS Zone
- Errors while sending emails due to DKIM Rejects
What is DKIM record?
DKIM is an email security standard designed to make sure that an email is not altered in transit between the sender and recipient server.
It uses an approach called “public-key cryptography” to verify that an email message was sent from an authorized mail server, and makes sure that the email delivered is an authentic one and no alterations were made to it in transit.
How does DKIM work?
DKIM is compatible with existing email infrastructure and works with SPF and DMARC to create multiple layers of security for domains sending emails. It uses public-key cryptography to sign an email with a private key as it is sent out from the sender server.
Recipient servers then use a public key published to a domain’s DNS to verify the source of the message and to make sure that the email was not altered in transit. Once the signature is verified with the public key by the recipient server, the email passes DKIM and is considered authentic.
Generate Custom DKIM record on Neo
- Log in to the Neo Admin panel
- Navigate to the Email Reputation tab in the sidebar
- Scroll down and click on Add DKIM record button to generate a custom DKIM record for your domain
-
image-shadow
Add DKIM record to domain's DNS Zone
- Copy the DNS Host Name from Neo Admin Panel once the DKIM record is generated as shown here
- Open your domain's control panel and navigate to its DNS Zone
- Create a new TXT record
alert-warning |
Please add the TXT record in the control panel where your domain's authoritative Name Server(NS) records are pointing to. You may use third-party tools like this one to check your domain's NS records. |
- In the field Hostname paste the DNS Host Name value copied above
- Now copy the TXT record value & paste it in the TXT value field in the TXT record as shown below
- Once TXT record is added, go back to Neo Admin Panel, select the option of I've created this TXT record within my DNS control panel and click on the Verify DKIM Record button
image-shadow
That's it! Your domain's DKIM record is set now.
alert-warning |
The fresh DKIM record change can take upto 6 hours in some cases to propagate globally. Hence you can verify your DKIM record a couple of hours after adding it if its not verified within a few minutes. |
Errors while sending emails due to DKIM Rejects
-
Error in DKIM public key, DKIM public key not found in DNS
The DKIM public key record from your DNS is missing.Most commonly it can happen due to some mistake while configuring dns records manually. We request you to add back the same and then attempt to send an email. -
Error in DKIM public key, invalid DKIM key format
The DKIM key added to your DNS panel might have some incorrect values or incorrect formatting. Please ensure that you copy the exact DKIM value from the Control Panel. Once your DKIM key is reverified it may take some time to reflect the changes which should be up to your DNS TTL. -
Error in DKIM public key, more than one TXT record in same selector
The DKIM public record added to your DNS has more than one TXT value. Titan doesn't allow multiple dkim key records to avoid conflicts under same selector. Hence, please ensure that you paste the exact value from the Control Panel. Once your DKIM key is reverified it may take some time to reflect the changes which should be up to your DNS TTL
You may refer to the following links to access your Email Control Panel to generate or copy your DKIM record.
Please note that after making changes to your DKIM record, it might take some time to propagate across the internet, post which you will no longer face this issue.
Feel free to reach out to us at hello@neo.space should you need any assistance with the above!