---
schema_version: "1"
id: b512a2fcfcec5aff7afdf0ea28b5455941313c7c3b1fb93068a701f8aa9db0ea
title: DomainKeys Identified Mail (DKIM) Keys
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/emailadmin_setup_dkim_key.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.emailadmin_setup_dkim_key.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b1c00531ac6cc1473760452fb212434bd647ee82d5fac1eeeec9e3189028c502
description: Use the DKIM key feature so Salesforce can sign outbound email sent on your company’s behalf. These signatures give recipients confidence that the email was handled in a way that’s consistent with your company. An active DKIM key also verifies your domain ownership so that Salesforce can send email for your users.
products:
  - Security
release: "264"
---
# DomainKeys Identified Mail (DKIM) Keys

Use the DKIM key feature so Salesforce can sign outbound email sent on your company’s behalf. These signatures give recipients confidence that the email was handled in a way that’s consistent with your company. An active DKIM key also verifies your domain ownership so that Salesforce can send email for your users.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions except <strong>Database.com</strong> and <strong>Starter</strong></td></tr></tbody></table>

- **[Considerations for DKIM Keys](https://help.salesforce.com/s/articleView?id=xcloud.emailadmin_considerations_dkim.htm&release=264.0.0&type=5)**  
    Before you create DKIM keys, understand their purpose and how DKIM key rotation and domain matching work.
- **[Create a DKIM Key](https://help.salesforce.com/s/articleView?id=xcloud.emailadmin_create_secure_dkim.htm&release=264.0.0&type=5)**  
    DomainKeys Identified Mail (DKIM) is a security standard that attaches a digital signature to your emails to prove that they came from you. With this signature, the receiving server can verify that the message content wasn’t altered or faked during transit. DKIM builds trust with email providers, so your messages are more likely to land in the inbox instead of the spam folder. An active DKIM key verifies your domain ownership so that Salesforce can send email for your users.
- **[Activate a DKIM Key](https://help.salesforce.com/s/articleView?id=xcloud.security_email_dkim_activate.htm&release=264.0.0&type=5)**  
    After you add a DomainKeys Identified Mail (DKIM) key in Setup and update your domain’s DNS records, wait for the DNS changes to apply across the internet before you activate the key.

#### See Also

- [Email Security Mechanisms](https://help.salesforce.com/s/articleView?id=xcloud.emailadmin_security_mechanisms.htm&release=264.0.0&type=5 "Salesforce supports several email security mechanisms: Transaction Layer Security (TLS), Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting, and Conformance (DMARC). Each mechanism protects different aspects of an email message.")
- [Requirements to Send Email from Salesforce](https://help.salesforce.com/s/articleView?id=xcloud.security_email_verification_requirements.htm&release=264.0.0&type=5 "To protect your org and brand, Salesforce requires domain-level and user-level email verification. To send email from Salesforce with your email domain, verify ownership of your email-sending domains.")