How to enable DKIM for your own domain?

You can create a DKIM record manually or with the use of an online DKIM record generator tool. The advantages of using a tool to create your record rather than doing it manually are: 

• It's free 
• It provides accurate results 
• It helps you avoid human errors 

Once you open your online DKIM record generator tool: 

• Enter your domain name in the designated box (if your website URL is https://company.com, your domain name will be company.com without the prefix)

• Click on the “Generate DKIM record” button

• You will receive a DKIM key pair (private and public keys)

• You need to publish your public key on your domain’s DNS

How to publish a DKIM record on your domain?

• Access your DNS management console 
• Add a new TXT record

Record type: TXT 

Name/Hostname: selector._domainkey.yourdomain.com

TTL: 3600 

Value: [paste the public key value generated by the DKIM generator tool]

How to check your DKIM record? 

To check your DKIM record you can use an online DKIM record lookup tool to make sure your record is devoid of errors, is functional, and configured properly. 

Note that DKIM alone cannot protect your domain against email-based attacks.

Breaking down the DKIM Record Syntax

Let’s first take the example of a DKIM record:

Record Name: The Name field in your DKIM record syntax is made up of two parts: a DKIM selector and a domain. The selector is a unique string that identifies the sending domain and helps locate the public key published on the domain’s DNS during a DKIM lookup, and it must be unique across all DKIM signing domains. The domain is the address of your DNS record.

Record Type: This field refers to the resource type of your DKIM record syntax. It may be TXT

(text) record, it can also be a CNAME (canonical name) record depending on your provider. 

TTL: The time-to-live for your record, measured in seconds, is the amount of time the record remains valid per session before it expires or gets refreshed. 

Value: Finally, the DKIM value is your public key that is matched against your private key (the signature key in your email header) to authenticate your emails.