DKIM Setup Helper

Look up an existing DKIM record, verify it is publishing correctly, and get guidance on setting up DKIM for common email providers.

DKIM setup guides by provider
Google Workspace selector: google
  1. Go to Google Admin → Apps → Google Workspace → Gmail → Authenticate email
  2. Click "Generate new record" and choose 2048-bit key
  3. Copy the DNS TXT record shown (host: google._domainkey)
  4. Add it to your DNS as a TXT record
  5. Return to Google Admin and click "Start authentication"
Microsoft 365 selector: selector1 / selector2
  1. Go to Microsoft 365 Admin Center → Settings → Domains → select your domain
  2. Under "DNS records", find the two DKIM CNAME records (selector1 and selector2)
  3. Add both CNAME records to your DNS provider
  4. In Microsoft 365 Admin → Security → Email & Collaboration → Policies → DKIM, enable DKIM for your domain
Mailchimp selector: k1
  1. In Mailchimp, go to Account → Domains
  2. Click "Authenticate" next to your domain
  3. Mailchimp will show you two CNAME records to add to DNS
  4. Add both CNAME records to your DNS provider
  5. Click "Authenticate Domain" in Mailchimp after DNS propagates
SendGrid selector: s1 / s2
  1. In SendGrid, go to Settings → Sender Authentication → Authenticate Your Domain
  2. Enter your domain and click "Next"
  3. Copy the 3 DNS records SendGrid provides (2 CNAME + 1 CNAME for DMARC)
  4. Add them to your DNS provider
  5. Click "Verify" in SendGrid after DNS propagates
Brevo (Sendinblue) selector: mail
  1. In Brevo, go to Settings → Senders & IP → Domains
  2. Click "Add a domain" and enter your domain
  3. Brevo will show DNS records to add (TXT for DKIM and SPF)
  4. Add the records to your DNS provider
  5. Click "Verify" in Brevo

Related tools

Email Header Analyzer Paste raw email headers and get a full breakdown of routing, authentication and … SPF Record Generator Build a valid SPF TXT record for your domain using a simple guided form. DMARC Record Generator Generate a properly formatted DMARC policy record for your domain. MX Health Summary Run a full email health check — MX, SPF, DMARC, DKIM and blacklist status in one…

Frequently asked questions

What is DKIM?
DomainKeys Identified Mail (DKIM) adds a cryptographic signature to outgoing emails. Receiving mail servers verify the signature against the public key published in your DNS. This proves the email was not modified in transit and was authorised by your domain.
Where do I find my DKIM selector?
Your email provider gives you the selector. Common selectors are: Google Workspace uses "google", Microsoft 365 uses "selector1" and "selector2", Mailchimp uses "k1", SendGrid uses "s1" and "s2". Check your provider's DKIM setup documentation.
How long does it take for a DKIM record to propagate?
DNS propagation typically takes a few minutes to 48 hours. Once published, you can use this tool to verify the record is live.