Articles on: Email
This article is also available in:

DKIM Email Authentication

DKIM (DomainKeys Identified Mail) is an email authentication method that allows the receiving server to verify that an email was genuinely sent from your domain and has not been altered during transit. In practice, DKIM adds a digital signature to email headers during the sending process. This signature is validated by the recipient’s server using a public key stored in your domain’s DNS records (see zone records below).


Enabling DKIM improves email delivery reliability and reduces the risk of emails being flagged as spam or phishing attempts. This is especially beneficial when sending newsletters, invoices, or other critical communications to customers.


DKIM is Automatically Enabled


When the service is activated, all required configurations for DKIM authentication are automatically set up for your domain. When sending emails via any channel, the following

header information is automatically added to the email:


DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; [...]


This signature allows the recipient’s server to verify the authenticity of the email.


Why Is the DKIM Signature Missing from My Emails?


If the DKIM signature (DKIM-Signature header) is missing from your sent emails, ensure that your domain includes the following DNS records in your zone file:


Record

Type

Value

av1._domainkey.omadomain.fi

CNAME

av1._domainkey.omadomain.fi.mail.avaruus.net

av2._domainkey.omadomain-fi

CNAME

av2._domainkey.omadomain-fi.mail.avaruus.net


  • Replace omadomain.fi with your actual domain name.
  • Replace omadomain-fi with your actual domain name, where periods (.) are replaced with hyphens (-).


If these records are not properly configured, DKIM authentication will fail, and the signature will not be added to outgoing emails.

Updated on: 24/08/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!