DKIM (DomainKeys Identified Mail) is a cryptographic email authentication method that attaches a digital signature to every outgoing email. The receiving mail server checks this signature against a public key published in your domain's DNS records to verify the email hasn't been tampered with in transit.
How DKIM Works
- Your mail server generates a unique hash of the email content.
- This hash is encrypted using your domain's private key and added as a header.
- The receiving server retrieves your public key from DNS.
- It decrypts the hash and compares it to the email content.
- If they match, the email passes DKIM authentication.
Why DKIM Matters for Cold Email
Without DKIM, your cold emails are significantly more likely to land in spam. Major email providers (Gmail, Outlook) use DKIM as a key signal in their spam filtering algorithms. A missing or broken DKIM record is one of the fastest ways to destroy your deliverability.
How to Set Up DKIM
- Generate a DKIM key pair through your email provider (Google Workspace, Microsoft 365).
- Add the public key as a TXT record in your domain's DNS settings.
- Verify the record is propagated using a tool like MXToolbox.
Common Pitfalls
- Multiple sending services: Each service (e.g., Instantly, SmartLead, your CRM) may need its own DKIM record.
- Key rotation: Best practice is to rotate keys annually.
- Selector conflicts: If you use multiple email providers, ensure each has a unique DKIM selector.