--- title: "Publishing DMARC Records After Setting Up DKIM Office 365 | DuoCircle" description: "Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/resources/dkim-office-365/" --- Resource # Publishing DMARC Records After Setting Up DKIM Office 365 Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in [ Talk to an Expert → ](/contact/) [ See what we make ](/products/) ## Publishing DMARC Records After Setting Up DKIM Office 365 How to enable DKIM Office 365 for complete protection. [Get DMARC Monitoring](/email/dmarc) ###### [EMAIL SECURITY SERVICES](/) ###### [PLANS AND PRICING](/email/dmarc#pricingarea) ###### [DMARC REPORTING](/email/dmarc) [DomainKeys Identified Mail](/resources/what-is-dkim) (DKIM) is one of the most relied upon [email security](/) standards today. With the help of [SPF](/resources/what-is-spf), [DMARC](/resources/what-is-dmarc), and DKIM, Office 365 users can secure their email communications and _prevent the clients from becoming victims of spam, spoofing, and phishing_. ![dkim records](https://media.mailhop.org/duocircle/images/2021/07/dkim-office-365.png) ### Setting Up The DKIM – Office 365 Firstly, since it involves authorizing Microsoft to send emails on the domain’s behalf, there is a need to edit the **SPF record** to include:spf.protection.outlook.com. Office 365 DKIM requires publishing two CNAME records for each domain in the DNS that needs a [DKIM signature](https://www.emailonacid.com/blog/article/email-development/what%5Fis%5Fdkim%5Feverything%5Fyou%5Fneed%5Fto%5Fknow%5Fabout%5Fdigital%5Fsignatures/). Follow the example below: | Host name | selector1.\_domainkey | | -------------------------- | ----------------------- | | Points to address or value | selector1-.\_domainkey. | | TTL | 3600 | | Host name | selector2.\_domainkey | | -------------------------- | ----------------------- | | Points to address or value | selector2-.\_domainkey. | | TTL | 3600 | Following the above example: - The selectors will always be ‘selector1’ and ‘selector2’ for Office 365. - [DomainGUID](https://docs.microsoft.com/en-us/answers/questions/57775/how-to-check-domain-guid-and-deleted-domains-recor.html) corresponds to the **MX record** of the custom domain. - initialDomain refers to the domain used to sign up for Office 365 and always ends in onmicrosoft.com. For example, if the initialDomain is example.com, then the ‘Point to address or value’ would be: `selector1-example-com._domainkey.example.onmicrosoft.com` ### How To Enable DKIM Office 365? Having published the [CNAME records in the DNS](https://docs.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide), one can now enable DKIM signing. Enabling DKIM can be done by logging in to the Office 365 admin center. Depending on which Microsoft portal in use, one can enable DKIM via either of the following options: 1. **protection.office.com**: Navigate through Threat Management > Policy > Additional Policies > DKIM 2. **security.microsoft.com**: Navigate through Email & Collaboration > Policies & rules > Threat policies > Additional policies > DKIM Select the domain for which to enable DKIM. _Enable the option Sign messages for this domain with DKIM signatures_. ### Additional: How To Setup DMARC Office 365 Since the _implementation of SPF and DKIM alone is not sufficient for reliable email delivery_, one also needs, in addition, to have [DMARC records](/resources/what-is-dmarc) published. The following steps will help [set up DMARC](/resources/create-dmarc-records): 1. Log in to Office 365 Admin Center. 2. In Settings, select Domains. 3. If already present, select the Office 365 domain or create the desired Office 365 domain and then select it. 4. For the selected domain, if there is already a \_dmarc record, edit it. There should be only one \_dmarc record in the DNS zone. 5. If needed to create a new \_dmarc record, it is possible to automate the process with a [DMARC record generator](/resources/dmarc-record-generator). 6. Finally, paste the generated text to the \_dmarc TXT record. ### Final Words Setting up **DKIM Office 365** and DMARC records can be easily accomplished by following the above guide. Once set up, _the user can be confident that the business emails from the organization are protected from spam, spoofing, and phishing_. The reader can find additional authentic information for setting it up on the official [Microsoft web page](https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-dkim-to-validate-outbound-email?view=o365-worldwide). ##### Join the thousands of organizations that use DuoCircle --- Find out how affordable it is for your organization today and be pleasantly surprised. [Get DMARC Monitoring](/email/dmarc) Interested in our Partner Program for MSPs and VARs? Visit Our [MSP Partner Program](/msp-partner-program). ## Ready to talk? Same-day response from someone technical. We tell you yes or no quickly. If yes, we get to work. [Talk to an Expert→](/contact/)[See what we make](/products/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"WebPage","name":"Publishing DMARC Records After Setting Up DKIM Office 365","description":"Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in ","url":"https://www.duocircle.com/resources/dkim-office-365/","speakable":{"@type":"SpeakableSpecification","cssSelector":[".page-answer",".duo-rich-text p:first-of-type"]},"dateModified":"2023-08-08T11:42:20.000Z","datePublished":"2021-07-13T17:34:05.000Z"},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"DuoCircle","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Publishing DMARC Records After Setting Up DKIM Office 365","item":"https://www.duocircle.com/resources/dkim-office-365/"}]}] ```