DKIM (DomainKeys Identified Mail) adds a digital signature to the email your domain sends. The receiving server checks the signature against a public key published in your domain's DNS. This shows that the message really came from your domain and was not changed on the way.
DKIM does not guarantee that every email is delivered. It gives the receiving server more information, so it can trust your mail and is less likely to mark it as spam.
If your domain uses our nameservers
When your domain uses ns1.lurstanhost.net and ns2.lurstanhost.net, the DKIM record is created for you. You do not need to do anything. The public key sits in a TXT record named default._domainkey.yourdomain.com.
To check it, log in to cPanel at https://cloud.lurstanhost.net:2083 and open Email Deliverability.
If your DNS is managed elsewhere
- In cPanel, open Email Deliverability and click Manage next to your domain.
- In the DKIM section, copy the record name (
default._domainkey) and its value, which starts withv=DKIM1. - At your DNS provider, add a TXT record with that name and value.
- Wait a few hours for the change to reach every server, then check Email Deliverability again.
The value is long. Some DNS providers take it in one piece, others split it into parts. Either way works, as long as the whole value is copied with nothing missing.
If you also send through another service
Services such as Google Workspace, Microsoft 365 or a newsletter service give you their own DKIM record, with a different name. Add theirs as well. Each service's record sits alongside ours and does not replace it.
Need a hand? Open a ticket.
