DomainKeys Identified Mail (DKIM) - Online Help | Zoho Campaigns

DomainKeys Identified Mail (DKIM)

DomainKeys Identified Mail (DKIM) is an email authentication mechanism that is deployed to prevent emails from being tampered with in transit. DKIM is widely adopted by businesses to protect their emails from spoofing and phishing attacks.

How DKIM works

DKIM uses the "Public key cryptography" technique to ensure that the email message was not modified during transit. When an email is to be sent by an outbound server, it will add a DKIM signature to the email. The DKIM signature contains a hash value that is generated by encrypting the the email message and headers using a private key. The DKIM signature also contains the names of the headers that were used to create the hash value. The email is sent after adding the DKIM signature to the email.
The recipient server will extract the DKIM signature and perform a DKIM lookup for the domain present in it. As a result, the DKIM public key will be fetched. The receiving server will decrypt the hash value using the public key and compare the email message and headers present in the decrypted hash value with the email message and headers present in the email that was received. The email will pass DKIM if both values match.

More about a DKIM record 

Sample DKIM record:
k - Indicates the algorithm that is used
- Public key
Sample DKIM signature:
v=1; a=rsa-sha256;;s=selec1; c=relaxed/relaxed; h=from:to:subject:date; bh=MHIzKDU2Nzf3MDEyNzR1Njc5OTAyMjM0MUY3ODlqBLP=;
- The version of the DKIM signature
a - Algorithm used to create the hash value
c - The type of canonicalization used for header and body
s - Selector
d - Domain used for signing
h - Headers that are signed
bh -  Hash value of the email body
b - Hash value of signed headers

Benefits of implementing DKIM

A sender domain will start earning reputation from mailbox providers and anti-spam services only when DKIM is implemented
  1. DKIM earns the trust of mailbox providers and antispam services
  2. Improves email deliverability
  3. Protects your emails from phishing and spoofing attacks
You can click here to learn more about setting up the DKIM record for your sender domain.

    Zoho DataPrep Personalized Demo

    If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.

    Zoho CRM Training

      Create, share, and deliver

      beautiful slides from anywhere.

      Get Started Now

              Zoho CRM Training Programs

              Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.

              Zoho CRM Training

                Zoho SalesIQ Resources

                    Zoho TeamInbox Resources

                              Zoho DataPrep Resources

                                Zoho DataPrep Demo

                                Get a personalized demo or POC

                                REGISTER NOW

                                  Design. Discuss. Deliver.

                                  Create visually engaging stories with Zoho Show.

                                  Get Started Now

                                                        • Related Articles

                                                        • What is Domain Keys Identified Mail (DKIM)?

                                                          DomainKeys Identified Mail (DKIM) is a security mechanism adopted by email marketing services to validate an email message. It checks if the emails are sent from a valid source and if the email message was tampered with in transit. Click here to ...
                                                        • How to setup SPF and DKIM TXT records for your domain

                                                          At Zoho Campaigns, we strongly urge you to authenticate your domain by implementing SPF and DKIM. To successfully authenticate your sender domain, you need to set up your SPF and DKIM TXT records. Authenticating your sender domain is a simple process ...
                                                        • Why am I not able to add a DKIM record in GoDaddy?

                                                          When you're adding a DKIM record in GoDaddy, you must not include the domain name in the DKIM key.   For example, if your DKIM key is, while adding it in GoDaddy, you must only add 72247._domainkey.   
                                                        • How to authenticate my domain

                                                          Domain Authentication is a mechanism that verifies the email from the point of its origin by validating the email sender. It checks emails to rule out any possibility of spamming or spoofing thereby protecting the sender's good reputation. ...
                                                        • When SPF or DKIM alignment fails

                                                          A DMARC check includes SPF and DKIM alignment. If your DMARC report says that SPF or DKIM alignment has failed for your emails even though you've properly authenticated your domain with Zoho Campaigns, read the information below to learn why this may ...



                                                        Watch comprehensive videos on features and other important topics that will help you master Zoho CRM.


                                                        Download free eBooks and access a range of topics to get deeper insight on successfully using Zoho CRM.


                                                        Sign up for our webinars and learn the Zoho CRM basics, from customization to sales force automation and more.

                                                        CRM Tips

                                                        Make the most of Zoho CRM with these useful tips.

                                                          Zoho Show Resources