---
title: "How to Create a DKIM Key in Salesforce: Step-by-Step Guide"
description: "How to Create a DKIM Key in Salesforce: Step-by-Step Guide"
image: https://aeyecrm.com/hubfs/generated-image-1.png
---
[Skip to content](https://aeyecrm.com/blog/how-to-create-a-dkim-key-in-salesforce-step-by-step-guide#main-content)
[](https://aeyecrm.com)
- [Home](https://aeyecrm.com)
- CRM Services
Show submenu for CRM Services
- [Overview](https://aeyecrm.com/crm-services)
- Salesforce
Show submenu for Salesforce
- [Salesforce Overview](https://aeyecrm.com/crm-services/salesforce)
- [Salesforce Implementation Services](https://aeyecrm.com/crm-services/salesforce/implementation-services)
- [Salesforce Customization Services](https://aeyecrm.com/crm-services/salesforce/customization-services)
- [Salesforce Managed Services](https://aeyecrm.com/crm-services/salesforce/managed-services)
- [Salesforce Integration Services](https://aeyecrm.com/crm-services/salesforce/integration-services)
- [Salesforce Platform Development](https://aeyecrm.com/crm-services/salesforce/platform-development)
- [Salesforce Migration Services](https://aeyecrm.com/crm-services/salesforce/migration-services)
- HubSpot
Show submenu for HubSpot
- [Hubspot Overview](https://aeyecrm.com/crm-services/hubspot/)
- [HubSpot Implementation Services](https://aeyecrm.com/crm-services/hubspot/implementation-services)
- [HubSpot Customization Services](https://aeyecrm.com/crm-services/hubspot/customization-services)
- [HubSpot Managed Services](https://aeyecrm.com/crm-services/hubspot/managed-services)
- [HubSpot Integration Services](https://aeyecrm.com/crm-services/hubspot/integration-services)
- [HubSpot Migration Services](https://aeyecrm.com/crm-services/hubspot/migration-services)
- [Hubspot Platform Development](https://aeyecrm.com/crm-services/hubspot/platform-development-services)
- [Salesforce vs Hubspot](https://aeyecrm.com/crm-services/salesforce-vs-hubspot)
- [Pricing](https://aeyecrm.com/crm-services/pricing)
- [Zoho](https://aeyecrm.com/crm-services/zoho)
- [Microsoft Dynamics 365](https://aeyecrm.com/crm-services/microsoft-dynamics)
- [Pipedrive](https://aeyecrm.com/crm-services/pipedrive)
- [Zendesk](https://aeyecrm.com/crm-services/zendesk)
- [Monday.com](https://aeyecrm.com/crm-services/monday)
- Who We Help
Show submenu for Who We Help
- [Family Businesses](https://aeyecrm.com/crm-services/industries/family-businesses)
- [Professional Services](https://aeyecrm.com/crm-services/industries/professional-services)
- [Manufacturing](https://aeyecrm.com/crm-services/industries/manufacturing)
- [SaaS](https://aeyecrm.com/crm-services/industries/saas)
- [Wholesalers](https://aeyecrm.com/crm-services/industries/wholesale-distribution)
- [Retail](https://aeyecrm.com/crm-services/industries/retail)
- [Any Industry](https://aeyecrm.com/crm-services/industries/other)
- Resources
Show submenu for Resources
- [Blog](https://aeyecrm.com/blog)
- [Case Studies](https://aeyecrm.com/case-studies)
- [The 7 Principles](https://aeyecrm.com/the-7-principles)
- [CRM Selection Guide](https://aeyecrm.com/crm-selection-guide-for-family-owned-businesses)
- [SOW Calculator](https://aeyecrm.com/crm-services/salesforce/salesforce-sow-calculator)
- [FAQs](https://aeyecrm.com/frequently-asked-questions)
- [About](https://aeyecrm.com/about-us)
[Contact Us](https://aeyecrm.com/contact-us)
[Blog](https://aeyecrm.com/blog/tag/blog) [Salesforce](https://aeyecrm.com/blog/tag/salesforce) [Emails](https://aeyecrm.com/blog/tag/emails)
# How to Create a DKIM Key in Salesforce: Step-by-Step Guide
Updated June 2025 • By [AeyeCRM](https://aeyecrm.com/blog/author/aeyecrm)
Securing your email communications is essential for protecting your brand and ensuring your messages reach recipients’ inboxes. One of the most effective ways to do this is by implementing DKIM (DomainKeys Identified Mail) in Salesforce. DKIM uses cryptographic keys to digitally sign emails, verifying that messages haven’t been altered during transit and that they truly come from your domain.
---
## What is DKIM and Why Does It Matter?
DKIM is an email authentication protocol that allows the recipient’s mail server to verify that an email was sent by your organization and hasn’t been tampered with[1](https://dmarcreport.com/blog/setting-dkim-keys-for-salesforce/). By enabling DKIM in Salesforce, you:
- Improve email deliverability and reputation
- Prevent email spoofing and phishing
- Ensure message integrity for your recipients
---
## Prerequisites
Before you begin, make sure you have:
- **Salesforce admin access** with permission to manage DKIM keys
- Access to your organization’s DNS provider to update DNS records
---
## Step 1: Access DKIM Settings in Salesforce
1. Log in to Salesforce with administrative privileges.
2. In **Setup**, use the Quick Find box to search for **DKIM Keys**.
3. Click on **DKIM Keys** to open the DKIM management page.
---
## Step 2: Create a New DKIM Key
1. Click **Create New Key**. The new key will be inactive by default.
2. Fill in the following fields:
- **RSA Key Size:** Choose the key size (typically 1024 or 2048 bits; 2048 is recommended for stronger security).
- **Selector:** Enter a unique name to identify this DKIM key (e.g., `salesforce2025`).
- **Alternate Selector:** Enter another unique name for key rotation.
- **Domain Name:** Enter the domain you use to send emails (e.g., `yourcompany.com`). This cannot be changed later.
- **Domain Match Pattern:** Specify which domains or subdomains the key should sign for. Examples:
- `example.com` (domain only)
- `*.example.com` (subdomains only)
- `example.com,*.example.com` (both)
3. Click **Save**. Salesforce will generate your DKIM key pair and display the DNS records you need to add.
---
## Step 3: Add DKIM Records to Your Domain’s DNS
1. Log in to your DNS provider’s platform.
2. Add the **CNAME** and **Alternate CNAME** records exactly as provided by Salesforce. These records link your domain to the DKIM public key Salesforce generated.
3. Save your changes and allow up to 48 hours for DNS propagation.
---
## Step 4: Activate the DKIM Key in Salesforce
1. Return to the DKIM Keys page in Salesforce.
2. Once DNS propagation is complete, click **Activate** next to your new DKIM key.
3. Salesforce will verify the DNS records. When verified, your emails will be signed with DKIM automatically.
---
## Step 5: Test Your DKIM Setup
- Send a test email from Salesforce to an external address.
- Check the email headers to confirm that a valid DKIM signature is present.
---
## Best Practices
- **Monitor DKIM Status:** Regularly check the DKIM key status in Salesforce.
- **Rotate Keys:** Salesforce can auto-rotate keys every 30 days for added security.
- **Coordinate with IT:** Work closely with your IT or DNS administrator to ensure correct DNS setup.
---
## Troubleshooting Tips
- If activation fails, verify that the CNAME records are correctly published and that DNS changes have fully propagated.
- Ensure you’re using the correct domain and selector values as provided by Salesforce.
---
## Conclusion
Implementing DKIM in Salesforce is a straightforward but crucial step to enhance your email security and deliverability. By following these steps, you’ll protect your brand and build trust with your recipients.
---
| Step | Description |
| --- | --- |
| Access DKIM Settings | Setup > Quick Find > DKIM Keys |
| Create Key | Define key size, selectors, domain, and save |
| Update DNS | Add CNAME records to your domain’s DNS |
| Activate Key | Activate in Salesforce after DNS propagation |
| Test & Monitor | Send test emails, monitor, and rotate keys as needed |
Where does your business stand?
## Take the Succession Readiness Scorecard
A free 5-minute assessment that scores your family business on the 7 principles of CRM-ready succession.
[Take the Scorecard](https://successionscorecard.com) [Book a consult](https://calendar.app.google/dFQEPDnkW4JizDkr5)
Keep reading
### More from the AeyeCRM blog
[](https://aeyecrm.com/blog/crm-ready-vs-crm-broken-family-business)
#### [What "CRM-Ready" Actually Means — And Why Most Family Businesses Are CRM-Broken Before They're CRM-Ready](https://aeyecrm.com/blog/crm-ready-vs-crm-broken-family-business)
[](https://aeyecrm.com/blog/salesforce-mfa-enforcement-is-tightening-is-your-org-actually-ready)
#### [Salesforce MFA Enforcement Is Tightening — Is Your Org Actually Ready?](https://aeyecrm.com/blog/salesforce-mfa-enforcement-is-tightening-is-your-org-actually-ready)
[](https://aeyecrm.com/blog/the-vacation-test-what-time-away-reveals-about-your-succession-plan)
#### [The Vacation Test: What Time Away Reveals About Your Succession Plan](https://aeyecrm.com/blog/the-vacation-test-what-time-away-reveals-about-your-succession-plan)
[](https://aeyecrm.com)
##### Quick Links
- [Home](https://aeyecrm.com)
- [About Us](https://aeyecrm.com/about-us)
- [Blog](https://aeyecrm.com/blog)
- [FAQs](https://aeyecrm.com/frequently-asked-questions)
- [Case Studies](https://aeyecrm.com/case-studies)
- [Contact Us](https://aeyecrm.com/contact-us)
##### CRM Services
- [Salesforce](https://aeyecrm.com/crm-services/salesforce)
- [HubSpot](https://aeyecrm.com/crm-services/hubspot/)
- [Zoho](https://aeyecrm.com/crm-services/zoho)
- [Microsoft Dynamics 365](https://aeyecrm.com/crm-services/microsoft-dynamics)
- [Pipedrive](https://aeyecrm.com/crm-services/pipedrive)
- [Zendesk](https://aeyecrm.com/crm-services/zendesk)
- [Monday.com](https://aeyecrm.com/crm-services/monday)
##### Industries
- [Wholesalers](https://aeyecrm.com/crm-services/industries/wholesale-distribution)
- [Manufacturing](https://aeyecrm.com/crm-services/industries/manufacturing)
- [SaaS](https://aeyecrm.com/crm-services/industries/saas)
- [Professional Services](https://aeyecrm.com/crm-services/industries/professional-services)
- [Retail](https://aeyecrm.com/crm-services/industries/retail)
- [Other](https://aeyecrm.com/crm-services/industries/other)
- [Family Business](https://aeyecrm.com/crm-services/industries/family-businesses)
##### CRM Comparison
- [Salesforce vs HubSpot](https://aeyecrm.com/crm-services/salesforce-vs-hubspot)
- [Salesforce vs Zoho](https://aeyecrm.com/blog/zoho-vs-salesforce-crm-comparison)
- [Salesforce vs Microsoft](https://aeyecrm.com/blog/microsoft-dynamics-365-vs-salesforce-crm-comparison)
- [Salesforce vs Monday.com](https://aeyecrm.com/blog/monday-vs-salesforce-crm-comparison)
- [Salesforce vs Pipedrive](https://aeyecrm.com/blog/pipedrive-vs-salesforce-crm-comparison)
- [Salesforce vs Zendesk](https://aeyecrm.com/blog/zendesk-vs-salesforce-crm-comparison)
© 2026
AeyeCRM . All Rights Reserved.
[linkedin](https://www.linkedin.com/company/aeyecrm/) [GMB](https://www.google.com/search?q=AeyeCRM&oq) [Follow us on Facebook](https://www.facebook.com/people/Aeyecrm/61584060121639/)
```json
{
"@context" : "https://schema.org",
"@type" : "Organization",
"logo" : "https://aeyecrm.com/path-to-logo.png",
"name" : "AeyeCRM",
"url" : "https://aeyecrm.com"
}
```
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "AeyeCRM",
"url" : "https://aeyecrm.com/blog/author/aeyecrm"
},
"dateModified" : "2025-06-17T18:04:20.998Z",
"datePublished" : "2025-06-17T18:04:20.000Z",
"headline" : "How to Create a DKIM Key in Salesforce: Step-by-Step Guide",
"image" : [ "https://aeyecrm.com/hubfs/generated-image-1.png" ],
"mainEntityOfPage" : {
"@id" : "https://aeyecrm.com/blog/how-to-create-a-dkim-key-in-salesforce-step-by-step-guide",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://aeyecrm.com/hubfs/AeyeCRM%20Proper%20logo-1.png"
}
}
}
```
```json
{
"@context" : "https://schema.org",
"@type" : "Corporation",
"contactPoint" : {
"@type" : "ContactPoint",
"availableLanguage" : "en",
"contactType" : "customer service",
"telephone" : "tel:+15122223382"
},
"logo" : "https://aeyecrm.com/hs-fs/hubfs/raw_assets/public/aeyecrm/images/logo-03.png?width=180&height=50&name=logo-03.png",
"name" : "AeyeCRM, LLC",
"sameAs" : [ "https://www.facebook.com/people/Aeyecrm/61584060121639/", "https://www.youtube.com/channel/UC2F8NBj7D8t5RIa-43haC5Q", "https://www.linkedin.com/in/philipmichaelshannon/#" ],
"url" : "https://aeyecrm.com/"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "NILL",
"@type" : "ProfessionalService",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "US",
"addressLocality" : "Austin",
"addressRegion" : "TX",
"postalCode" : "NILL",
"streetAddress" : "NILL"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 30.267153,
"longitude" : -97.7430608
},
"image" : "https://aeyecrm.com/hs-fs/hubfs/raw_assets/public/aeyecrm/images/logo-03.png?width=180&height=50&name=logo-03.png",
"name" : "AeyeCRM, LLC",
"priceRange" : "NILL",
"sameAs" : [ "https://www.facebook.com/people/Aeyecrm/61584060121639/", "https://www.youtube.com/channel/UC2F8NBj7D8t5RIa-43haC5Q", "https://www.linkedin.com/in/philipmichaelshannon/#" ],
"telephone" : "tel:+15122223382",
"url" : "https://aeyecrm.com/"
}
```