Configuring DKIM

Configuring DKIM

1.0 Introduction

DomainKeys Identified Mail (DKIM) is an email authentication standard designed to protect both senders and recipients from email spoofing and phishing. With DKIM, each outgoing message is cryptographically signed. Receiving mail servers (such as Gmail or Microsoft 365) can then check the signature against a DNS record published by the sender’s domain, ensuring that:
  1. The message was really sent by the claimed domain.
  2. The content wasn’t altered in transit.

2.0 Why IoT Secure Supports DKIM

IoT Secure relays customer mail through our secure infrastructure. By signing with DKIM, we ensure that:
  1. Your messages are less likely to be flagged as spam.
  2. Recipients can verify that the mail truly comes from your domain.
  3. You align with modern requirements for DMARC, SPF, and overall email deliverability.
This strengthens trust with your recipients and helps protect your brand from being impersonated.

3.0 How Setup Works

You don’t need to manually generate or manage DKIM keys. IoT Secure provisions and manages them for you.

To enable DKIM on your account:
  1. Contact IoT Secure Support
  2. Our team will provision a DKIM key for your domain.
  3. We will send you back DNS record details like the following example:

DOMAIN: iotsecure.io
TYPE:   TXT
NAME:   mail1._domainkey.iotsecure.io
VALUE:  "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDS3tyHSHBbgcxNu5/mQY5fiz4L8k8lulFjCn7qMiSJZ99r2ywSqlYtWmAfV+U2kBdpU2erJAKwWuZt5Q/3EaN7b3Wd/+08c+jrRuoG8Aj0CGjNpGQF9AMFPI2uD3dE0pSMusBtVCJxfAKVOsifKwgGexzwPQ8zcvT+nmpT1e1reQIDAQAB"
TTL:    86400 Seconds

What To Do With This Information
As the domain owner, you must add this DNS record at your DNS hosting provider (often your registrar, or a service like GoDaddy).
  1. Log in to your DNS provider’s management console.
  2. Add a new TXT record.
    1. Name/Host: mail1._domainkey
    2. Type: TXT
    3. Value: Paste the long string beginning with "v=DKIM1; k=rsa; p=...
    4. TTL: 86400 (or 1 day).
  3. Save changes.

Verification & Testing
IoT Secure will automatically begin signing outgoing messages with your key. Receiving servers (like Gmail) will validate the signature against your DNS record.  We recommend using the free DKIM Test utility here.

4.0 Additional Help/Resources

If you have any questions or trouble publishing the DNS record, please contact support@iotsecure.io.  Our team will walk you through the process and confirm that your DKIM setup is working correctly.