---
schema_version: "1"
id: 1a6f623afc952cc9ac028e907f1f819c6e9cfa81e59577d38ce6fff4e10c257e
title: Support for DomainKeys Identified Mail (DKIM) Authentication
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_support_for_dkim_authentication.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_support_for_dkim_authentication.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e6bc1c0fe2fb2dca389b005b66af6ae59ec5d2a5d2d72c2091982d2e7a768240
description: Salesforce B2C Commerce provides an out-of-the-box solution on our first-party Point of Deployment (POD) that customers can use for their email requirements. This service provides support for DKIM and SPF authentication. DKIM is an email authentication protocol that adds a cryptographic digital signature to outgoing emails. With DKIM, receivers can verify that the domain owner authorized the email and that it wasn’t altered in transit. DKIM helps reduce spam and phishing emails.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Support for DomainKeys Identified Mail (DKIM) Authentication

Salesforce B2C Commerce provides an out-of-the-box solution on our first-party Point of Deployment (POD) that customers can use for their email requirements. This service provides support for DKIM and SPF authentication. DKIM is an email authentication protocol that adds a cryptographic digital signature to outgoing emails. With DKIM, receivers can verify that the domain owner authorized the email and that it wasn’t altered in transit. DKIM helps reduce spam and phishing emails.

[Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US)

## DKIM Authentication Requirements for Google, Yahoo, and Microsoft

- Google announced that, starting in 2024, it requires both Sender Policy Framework (SPF) and DKIM for users who send 5,000+ emails per day. See [Email sender guidelines](https://support.google.com/mail/answer/81126?hl=en).
- Yahoo announced similar plans for Q1 2024. See [More Secure, Less Spam Enforcing Email Standards for a Better Experience](https://blog.postmaster.yahooinc.com/post/730172167494483968/more-secure-less-spam).
- Likewise, Microsoft announced authentication requirements with DKIM, DMARC, and SPF for bulk senders. See [Strengthening Email Ecosystem: Outlook’s New Requirements for High‐Volume Senders](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730).

To ensure compliance with the bulk sender authentication requirements, here are the high-level steps.

- Generate a private-public key pair for DKIM. See [Generate a Private-Public Key Pair](https://help.salesforce.com/s/articleView?id=cc.b2c_generate_private_key.htm&release=264.0.0&type=5 "DKIM authentication requires you to specify a private key in Business Manager in B2C Commerce. Generate a private key in a terminal with these commands.")
- To reflect the new public key, update your DNS records. See [Configure DKIM for B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_deploy_dkim.htm&release=264.0.0&type=5 "Major email providers, including Google, Microsoft, and Yahoo, now require DomainKeys Identified Mail (DKIM) authentication. Configuring DKIM is essential to ensure that your emails reach customer inboxes and aren’t rejected or flagged as spam. Configure DKIM to verify that the emails come from the domain that they claim to be from.").
- Import your private key in Business Manager. See [Configure DKIM for B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_deploy_dkim.htm&release=264.0.0&type=5 "Major email providers, including Google, Microsoft, and Yahoo, now require DomainKeys Identified Mail (DKIM) authentication. Configuring DKIM is essential to ensure that your emails reach customer inboxes and aren’t rejected or flagged as spam. Configure DKIM to verify that the emails come from the domain that they claim to be from.").
    - The key is used for all of your outgoing emails, and it satisfies Google, Yahoo, and Microsoft requirements.
    - Specifying your key is required only one time per instance.
- Test your changes in your development or staging instance before introducing them to production.

In this section:

- **[Configure DKIM for B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_deploy_dkim.htm&release=264.0.0&type=5)**  
    Major email providers, including Google, Microsoft, and Yahoo, now require DomainKeys Identified Mail (DKIM) authentication. Configuring DKIM is essential to ensure that your emails reach customer inboxes and aren’t rejected or flagged as spam. Configure DKIM to verify that the emails come from the domain that they claim to be from.
- **[Generate a Private-Public Key Pair](https://help.salesforce.com/s/articleView?id=cc.b2c_generate_private_key.htm&release=264.0.0&type=5)**  
    DKIM authentication requires you to specify a private key in Business Manager in B2C Commerce. Generate a private key in a terminal with these commands.

#### See Also

- [_Wikipedia_: DomainKeys Identified Mail](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail)
- [_Wikipedia_: Sender Policy Framework](https://en.wikipedia.org/wiki/Sender_Policy_Framework)