Use the DKIM key feature so Salesforce can sign outbound email sent on your company’s
behalf. These signatures give recipients confidence that the email was handled in a way that’s
consistent with your company. An active DKIM key also verifies your domain ownership so that
Salesforce can send email for your users.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: all editions except Database.com and Starter |
- Considerations for DKIM Keys
Before you create DKIM keys, understand their purpose and how DKIM key rotation and domain matching work.
- Create a DKIM Key
DomainKeys Identified Mail (DKIM) is a security standard that attaches a digital signature to your emails to prove that they came from you. With this signature, the receiving server can verify that the message content wasn’t altered or faked during transit. DKIM builds trust with email providers, so your messages are more likely to land in the inbox instead of the spam folder. An active DKIM key verifies your domain ownership so that Salesforce can send email for your users.
- Activate a DKIM Key
After you add a DomainKeys Identified Mail (DKIM) key in Setup and update your domain’s DNS records, wait for the DNS changes to apply across the internet before you activate the key.
