How to Setup DKIM in Salesforce

DomainKeys Identified Mail (DKIM) is an email authentication method that protects against spam, phishing, and spoofing by verifying the sender's identity. DKIM allows email senders to digitally sign their messages. Recipients can then validate these signatures to ensure the messages are genuine. Email service providers like Google, Yahoo, and Microsoft widely use DKIM. DKIM ensures important emails sent from Salesforce reach recipients' inboxes without being blocked or marked as spam. It is crucial for maintaining email deliverability and protecting the integrity of business communications. Here is how to setup DKIM in Salesforce.

How to Setup DKIM in Salesforce

1- Search for "DKIM" in Salesforce Setup and select "DKIM Keys".

2- Click on "Create New Key" button to create a new DKIM key.

3- Enter these details:
Key Size: 2048-bit
Selector: sf1
Alternate Selector: sf2
Domain: salesforcetime.com (enter your own domain)
Domain Match Pattern: salesforcetime.com (it is a comma separated list of domain patterns that the domain name must match before Salesforce signs an email with this DKIM key)

4- Click "Save". Then, Salesforce will publish the TXT records for this DKIM key to DNS. After a short time, refresh the page and you will see the CNAME and alternate CNAME records.

However, as you can see, "Activate" button is disabled. This is because there is one more step that you need to complete before activating the DKIM key.

5- Now, it is time to add the CNAME records to your DNS. Open your DNS administration interface and enter 2 new CNAME records. For each row, copy the portion of your CNAME record that comes before "IN CNAME" and enter it as the Name (1). Then, copy the portion of your CNAME record that comes after "IN CNAME" and enter it as the Value (2).

6- After completing these steps, you can go back to your DKIM Keys in Salesforce. It may take 24-48 hours for the Activate button to be enabled.

To verify DKIM, send a test email, click on the three dots, and then select "Show Original." If the DKIM setup is correct, you will see "PASS" next to DKIM.