Digitally signing your email with DKIM

Eric Klimuk

05-Dec-2017

DomainKeys Identified Mail (DKIM) lets an organization take responsibility for a message that is in transit.  DKIM attaches a new domain name identifier to a message and uses cryptographic techniques to validate authorization for its presence. The identifier is independent of any other identifier in the message, such in the author's From: field.

Why you need an DKIM record

It is highly recommend to use DKIM to ensure proper email delivery to domains such as gmail.com and outlook.com.  Mail servers increasingly are using SPF and DKIM to validate messages and send messages that don't include DKIM and SPF to SPAM or Junk folders.

How to setup DKIM

Add the DKIM record to your DNS server

Setting up a DKIM record is different for all DNS servers. To makes things easy, here are the instructions for GoDaddy, Namecheap, 1&1, Network Solutions, and Google Domains. 

Your services might be very different and we highly suggest you contact your systems administrator to get your DKIM implemented.

1. Login to your DNS console.
    
2. Add the primary cname entry.
    

   "supportbench-dkim1._domainkey" pointing to "supportbench-dkim1._domainkey.supportbench.net"
   

3. Add the secondary cname entry.
    

   "supportbench-dkim2._domainkey" pointing to "supportbench-dkim2._domainkey.supportbench.net"
   

4. The record within the DNS server should look similair to the following:
   
   
    

Enable DKIM for your email addresses

Once the DKIM cname record is setup, you will need to enable DKIM signing on the email addresses you want to use.

1. Log into the Supportbench agent console.
    
2. Go to "Configuration" --> "Email configuration" --> "Address / signature".
    
3. Click on the email address that you want to enable DKIM for.
    
4. Select the option "Enable DKIM".
   
   
5. Save your settings.

Your DKIM is all setup.