How do I set up DKIM?

Context

In this article, you'll learn about Domain Verification, TXT Records, DKIM, and how to set up DKIM.
 
 Why do I need Domain Verification?
Once Domain Verification is set up, any email coming from @domain.com will be verified across all your properties. In other words, your properties will not need to verify their emails individually. It's once-and-done!
 
 

What is a TXT Record?

Your domain is associated with a set of Domain Name System (DNS) records that you manage through your DNS provider. A TXT record is a type of DNS record that provides additional information about your domain. Each TXT record consists of a name and a value.
 
Add a TXT record to your domain's DNS server using the specified Name and Value. Amazon SES domain verification is complete when Amazon SES detects the existence of the TXT record in your domain's DNS settings.
 
* If your DNS provider does not allow DNS record names to contain underscores, you can omit _amazonses from the Name. In that case, for the preceding example, the TXT record name would be example.com instead of _amazonses.example.com. To make the record easier to recognize and maintain, you can also optionally prefix the Value with amazonses: In the previous example, the value of the TXT record would therefore be amazonses:pmBGN/7MjnfhTKUZ06Enqq1PeGUaOkw8lGhcfwefcHU= .
 
 

What's DKIM?

DomainKeys Identified Mail (DKIM) provides proof that the email you send is authentic, trustworthy, and originates from your domain. DKIM signatures are stored in your domain's DNS system as CNAME Records.
 
DomainKeys Identified Mail ( DKIM ) is a standard that allows senders to sign their email messages with a cryptographic key. Email providers then use these signatures to verify that the messages weren't modified by a third party while in transit.
 
An email message that is sent using DKIM includes a DKIM-Signature header field that contains a cryptographically signed representation of the message. A provider that receives the message can use a public key, which is published in the sender's DNS record, to decode the signature. Email providers then use this information to determine whether messages are authentic. To learn more about DKIM, see http://dkim.org.
 
 

How To Set up DKIM

Please request your IT team to set up the DNS values specified below:
 

Step 1 - Setting up Amazon SES Domain Verification

 
Add the following TXT record to your DNS
Record Type: TXT (Text)
TXT Name*: _amazonses.DOMAIN.com
TXT Value: NfKR8pcffBdMIndy4nFQY2nh+BB3ccjz+IP9ssl8Qoc=
 
 

Step 2 - Setting up DKIM

Add the 3 CNAME records in the attached CSV file in your DNS.