DKIM records explained

Key points

• DKIM adds a cryptographic signature to each email
• Receivers verify the signature via your public key in DNS
• Protects against spoofing your domain
• Usually a host like 'default._domainkey' + a TXT value

How to do it

1. Get the DKIM selector + public key from your provider
2. Add it as a TXT record in DNS
3. Enable signing in your provider
4. Verify the signature passes

Common mistakes

• Copying the key with line breaks/extra quotes
• Wrong selector name
• Not enabling signing after adding the record