DKIM missing or not signing – how to fix
Your mail isn't signed with DKIM, or the DKIM selector isn't set up. Here's how to enable and verify DKIM.
Why it matters
DKIM lets receivers verify that the message wasn't altered and that it came from a server authorized by your domain. DMARC can pass with SPF or DKIM in alignment; having both is best practice.
How to fix it
Enable DKIM signing in your ESP or mail server. They'll give you a selector name and a public key.
Publish the public key as a TXT record at <selector>._domainkey.<your-domain>.
Send a test email and check the raw headers for a DKIM-Signature header.
Ensure the signing domain aligns with your From domain for DMARC.
Run a free scan
See your domain's current status for SPF, DMARC, and more. No signup required.
Run a free scanRead-only checks. We don't send email or modify DNS.