---
schema_version: "1"
id: 2a2c96493020003b5ac5159602d4027a8b3acac614c6e19030d5eb75124dda2e
title: DKIM Signatures Protect the Reply-To Header
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_sales_productivity_dkim_reply_to.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_dkim_reply_to.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5a77891896a0a29e6202691fbc631fbded9b8c342f2d5ef56f6eb5092fcfc3a9
description: When you sign email sent by Salesforce with a DomainKeys Identified Mail (DKIM) key, the signature configuration now includes the Reply-To header. To protect against conversation hijacking, this change prevents modification of the Reply-To address during delivery. If you use DKIM keys, you get this benefit automatically. Otherwise, set up DKIM keys to securely sign outgoing email sent by Salesforce.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# DKIM Signatures Protect the Reply-To Header

When you sign email sent by Salesforce with a DomainKeys Identified Mail (DKIM) key, the signature configuration now includes the Reply-To header. To protect against conversation hijacking, this change prevents modification of the Reply-To address during delivery. If you use DKIM keys, you get this benefit automatically. Otherwise, set up DKIM keys to securely sign outgoing email sent by Salesforce.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions except Salesforce Free Suite and Database.com.

**When:** This change applies to active DKIM keys in Salesforce as of April 2, 2026.

#### See Also

- [_Salesforce Help_: Create a DKIM Key](https://help.salesforce.com/s/articleView?id=sales.emailadmin_create_secure_dkim.htm&type=5&language=en_US)
- [Verify Your Email Domain Ownership](https://help.salesforce.com/s/articleView?id=release-notes.rn_general_verify_email_domain.htm&release=260&type=5 "To avoid disruption in email sent from Salesforce, verify the domains that you own with a DomainKeys Identified Mail (DKIM) key or an authorized email domain. As part of our ongoing efforts to strengthen the security of our email services, email domain verification is now mandatory. Salesforce no longer delivers emails from unverified domains, even if the email addresses are verified.")