--- title: "How do you configure DKIM keys for Salesforce? | DuoCircle" description: "How do you configure DKIM keys for Salesforce." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/" --- Quick Answer Configure DKIM in Salesforce in two stages. First, generate the key pair: log in with admin privileges, open Setup, search DKIM Keys under Email, click Create New Key, and enter the signing domain, a unique selector (for example, salesforce2024), and a key size of 1024 or 2048 bits. Salesforce produces a public key and the exact TXT record to publish. Second, add the public key to DNS: at your DNS provider, create a TXT record named selector.\_domainkey.yourdomain.com (for example, salesforce2024.\_domainkey.example.com) with the value Salesforce provided. Save the record, allow 24 to 48 hours for propagation, then return to Salesforce and verify the key. Pair DKIM with SPF and DMARC for full alignment. How do you configure DKIM keys for Salesforce? Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/09/How-do-you-configure-DKIM-keys-for-Salesforce.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20do%20you%20configure%20DKIM%20keys%20for%20Salesforce%3F&url=undefined%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F&title=How%20do%20you%20configure%20DKIM%20keys%20for%20Salesforce%3F "Share on Reddit") [ ](mailto:?subject=How%20do%20you%20configure%20DKIM%20keys%20for%20Salesforce%3F&body=Check out this article: undefined%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F "Share via Email") ![configure DKIM](https://media.mailhop.org/duocircle/images/2024/09/email-sending-services-3478.jpg) DKIM is a cryptography-based [email authentication](/resources/email-authentication) protocol that ensures that only authorized people send emails on your behalf and that nobody changes the content of the message in transit. Salesforce highly encourages its users to deploy SPF, DKIM, and [DMARC](/email/dmarc) to protect their domain and email receivers from getting duped. Salesforce has also made it quite straightforward to integrate and configure DKIM so that most of your **outgoing emails** land in the inboxes of recipients and not their [spam or junk folders](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/). With DKIM, the chances of your emails getting marked as spam go down significantly. ## Steps to generate a DKIM key in Salesforce DKIM, when combined with [SPF](/resources/what-is-spf) and DMARC, strengthens your [email infrastructure](https://www.voilanorbert.com/blog/email-infrastructure/), keeping phishing and [spoofing attacks](https://www.bleepingcomputer.com/news/security/microsoft-powershell-gallery-vulnerable-to-spoofing-supply-chain-attacks/) at a distance. So, let’s see how you can achieve this by **enabling DKIM in Salesforce**. - Login to your Salesforce account with administrative privileges. - Open ‘**DKIM settings**’ by clicking on the gear icon you will see in the top right corner. - Go to the ‘Quick Find’ box and type ‘[DKIM](/resources/what-is-dkim).’ Under the ‘Email’ section, select the ‘DKIM keys’ option. - Click the ‘Create new key’ and fill in the following fields- - **Domain**: _Enter the domain name you want to sign your emails with_. - **Selector**: Enter a unique name for the DKIM selector (e.g., salesforce2024). This selector will be used to differentiate this key in your [DNS records](https://www.ibm.com/topics/dns-records). - **Key size**: Choose a key size. Salesforce typically offers 1024-bit or 2048-bit keys, which provide stronger [email security](/). - After filling out the details, click ‘Generate,’ and you will receive a pair of cryptographically secured public and [private keys](https://en.wikipedia.org/wiki/Public-key%5Fcryptography). These keys will be produced by Salesforce exclusively for your domain. [![cryptographically secured keys](https://media.mailhop.org/duocircle/images/2024/09/spf-validator-4.jpg)](https://media.mailhop.org/duocircle/images/2024/09/spf-validator-4.jpg) ## How to add the DKIM key in Salesforce? After the **DKIM key** is generated, Salesforce will display the [public key](https://www.techtarget.com/searchsecurity/definition/public-key) along with the exact DNS TXT record format that needs to be added to your domain’s DNS settings. Follow these steps: 1. _Copy the public key and DNS TXT record format provided by Salesforce_. 2. Log in to your **DNS provider’s platform** and locate the option to add a new [TXT record](https://www.digicert.com/faq/dns/what-is-a-txt-record). 3. Enter the following details: - **Name**: This should be a combination of the [DKIM selector](/resources/what-is-dkim-selector) and your domain, e.g., salesforce2024.\_domainkey.yourdomain.com. - **Type**: Choose TXT. - **Value**: Paste the public key from Salesforce. [![DNS settings](https://media.mailhop.org/duocircle/images/2024/09/hosted-email-server-7392.jpg)](https://media.mailhop.org/duocircle/images/2024/09/hosted-email-server-7392.jpg) Save the new TXT record in your [DNS settings](https://www.ntchosting.com/encyclopedia/dns/settings/). The changes may take **24 to 48 hours** to propagate across the internet. Monitor the status of the keys in the **Salesforce panel** to ensure they function properly. ## Topics DKIMDMARCemail securityspf ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F) [ ](https://twitter.com/intent/tweet?text=How%20do%20you%20configure%20DKIM%20keys%20for%20Salesforce%3F&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Femail-security%2Fhow-do-you-configure-dkim-keys-for-salesforce%2F) Copy Related Articles - [ ![DMARC, SPF, and DKIM](https://media.mailhop.org/duocircle/images/2026/04/spf-record-4526.jpg) DMARC, SPF, and DKIM in 2026: Why Email Authentication Is Now a Regulatory Requirement, Not Just a Best Practice Email Security ](/blog/dmarc-spf-dkim-2026-email-authentication-regulatory-requirement-best-practice/) - [ ![Email Monitoring Tools](https://media.mailhop.org/duocircle/images/2026/05/spf-validator-6720.jpg) Email Monitoring Tools: A Complete Guide to Protecting Your Email Ecosystem Email Security ](/blog/email-monitoring-tools-guide-protecting-your-email-ecosystem-security/) - [ ![email security techniques](https://media.mailhop.org/duocircle/images/2024/12/spf-record-generator.jpg) 5 efficient email security techniques for advanced persistent threats Email Security ](/blog/email-security/5-efficient-email-security-techniques-for-advanced-persistent-threats/) - [ ![checking your email health](https://media.mailhop.org/duocircle/images/2025/12/spf-record-5689.jpg) A practical guide on checking your email health Email Security ](/blog/email-security/a-practical-guide-on-checking-your-email-health/) ## Related Articles [ Email Security 12m DMARC, SPF, and DKIM in 2026: Why Email Authentication Is Now a Regulatory Requirement, Not Just a Best Practice Apr 29, 2026 ](/blog/dmarc-spf-dkim-2026-email-authentication-regulatory-requirement-best-practice/)[ Email Security 5m Email Monitoring Tools: A Complete Guide to Protecting Your Email Ecosystem May 7, 2026 ](/blog/email-monitoring-tools-guide-protecting-your-email-ecosystem-security/)[ Email Security 6m 5 efficient email security techniques for advanced persistent threats Dec 3, 2024 ](/blog/email-security/5-efficient-email-security-techniques-for-advanced-persistent-threats/)[ Email Security 4m A practical guide on checking your email health Dec 26, 2025 ](/blog/email-security/a-practical-guide-on-checking-your-email-health/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How do you configure DKIM keys for Salesforce?","description":"How do you configure DKIM keys for Salesforce.","url":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/","datePublished":"2024-09-13T15:43:03.000Z","dateModified":"2025-05-23T11:53:25.000Z","dateCreated":"2024-09-13T15:43:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/"},"articleSection":"email-security","keywords":"DKIM, DMARC, email security, spf","wordCount":422,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/09/email-sending-services-3478.jpg","caption":"configure DKIM","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Security"},{"@type":"ListItem","position":3,"name":"How do you configure DKIM keys for Salesforce?","item":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Security","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"How do you configure DKIM keys for Salesforce?","item":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How do you configure DKIM keys for Salesforce?","description":"How do you configure DKIM keys for Salesforce.","url":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/","datePublished":"2024-09-13T15:43:03.000Z","dateModified":"2025-05-23T11:53:25.000Z","dateCreated":"2024-09-13T15:43:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/how-do-you-configure-dkim-keys-for-salesforce/"},"articleSection":"email-security","keywords":"DKIM, DMARC, email security, spf","wordCount":422,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/09/email-sending-services-3478.jpg","caption":"configure DKIM","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```