What is DKIM?
DKIM (Domain Keys Identified Mail) is a complex email protocol that allows a sender’s identity to be authenticated by the recipient to help combat email fraud.
How does it work?
A public key is used to create a DNS record. That same key is also used to digitally sign the header of emails that are sent. When the recipient’s provider receives the email, they check the sender’s DNS records and the sender’s authenticity is validated by the matching key. The message can then be delivered to the recipient with confidence that the sender is who they claim to be.
Why is it important?
DKIM affords the greatest assurance that the sender is who they say they are and gives email providers a way to track and hold senders accountable for the messages they’re sending. As a result, deliverability of these messages is greater and inbox placement is improved.
What’s special about Infusionsoft’s implementation of DKIM?
Normally, implementing DKIM requires a domain owner to create public and private RSA keys which are used in the authentication process. To make it easier for you to implement DKIM, Infusionsoft has eliminated this complexity by creating these keys on your behalf. With this approach, you only need to create a CNAME record in your DNS that points back to the Infusionsoft servers, and turn on the function in your Infusionsoft account. We’ve tried to further simplify this process by providing simple, step-by-step instructions directly within your Infusionsoft account to help guide you.
How do I set it up?
- Go to Marketing > Settings > Email Authorization
- Click the Add a Domain button
- In the window that appears, select the domain for which you would like to create a DKIM key from the drop-down. This will populate the field in step two.
- Now, follow steps that appear on-screen. These instructions require you to create a CNAME entry in your DNS records. If you need assistance with this step, we recommend you contact your DNS provider for assistance because the steps may vary depending on your provider. Below are links to help articles of several common DNS providers to help you.
- In the last step, you’ll click the Verify button at the bottom of the window to continue. Infusionsoft will attempt to validate the CNAME record you created in your DNS. The record must be live in order for your Infusionsoft account to successfully validate it. If the record cannot be verified, wait until the Time-To-Live (TTL) settting of your DNS provider has passed, and try to validate again by clicking the Retry Validation link.
- Once the domain has been verified, Infusionsoft will begin using DKIM when sending emails on your behalf.