An application of the 'TXT'-record is the so called DKIM-record (DomainKeys Identified Mail). This type of TXT-record is used to check the authenticate the authenticity of e-mails, by relating an e-mail to a domain name. In this article we'll show you how to configure a DKIM record for your domain in your TransIP control panel.
DKIM is used to check the validity of the sender of emails. When sending emails, a digital signature is then sent. This is checked by means of the key which is included in the value of the DKIM record.
When you have purchased a web hosting package on your domain, you use three DKIM records that we have created for you. Check this article for more information about the DKIM records and other DNS records of our web hosting packages.
If you send email from your own mail server, it is important that you install and configure DKIM on this.
Using this DKIM generator, you can then create a DKIM record and corresponding 'keys' yourself. You enter the domain in the first box, for 'Selector' you give the DKIM record a name, for example 'key1'.
On this page you can then check whether your DKIM record is correct.
Where do I add a DKIM record?
You can add all your DNS records easily and free of charge via your control panel. Go to the 'Domain & Hosting' tab and click the domain in the left column for which you want to set the DKIM record (do not check).
Now scroll to 'Advanced Domain Settings', followed by 'DNS'. If you do not see this yet, first click the switch behind 'TransIP settings' so the TransIP settings are switched off. This will show an overview of your DNS records .
How do I set a DKIM record?
Below you can see an example of a correct DKIM record.
The _domainkey component of the 'Name' indicates that you are entering a DKIM key for the domain name.
When using the aforementioned DKIM generator, you can enter a name for the key. In our example, we have named the key 'key1'. This is then displayed under 'Selector Record' as key1._domainkey.domainname.com IN TXT.
In that case, you only enter key1._domainkey as 'Name' of the DNS record. Our DNS software adds the domain name in the background.
The 'TTL' of a DNS record determines how long the record can remain in the cache. We recommend keeping the TTL low, for example at 1 or 5 minutes.
Because a DKIM record is a variation on the TXT record, we choose 'TXT' under 'Type'.
In the example above, the full value is as follows:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubTwESpoF65AFY fIfGZKMlv7jbut8G1dWEMAAJCVK+etw4dY8rllw40d6Ev8bBRHmfai0qA68jSFzGKUD4iwuzOpCK mz2uZmtriCIgQ8vFjogNZEoR710UvqqHtRxY7wsR8v04BRxjSnnDf7FhNzO4PV5mpCElecd3mGqH K3EnEvlImmgGMPsiegu6RYF8z0Eukn9NS7J2W+Q0Urzymxdt9DJCQ+wwqZUdvPETz4PuiX3WaY9y FIuXywnIQ3lxWyeb2RX9xJPPbSsNBIUKExgn7QrAhxz1ApsyIbfUpDz+Xh4huJMv9QWaF9HJVQyT f5k01Tm4P0IG82Hb1e9sQXQIDAQAB
If you use the DKIM generator, you will see the value for your DKIM record under 'Selector Record'. If we use our example, the value "k=rsa\; p=MIGfMA0...QIDAQAB" is displayed.
The different components of a DKIM records have the following meaning:
- v=DKIM1: This means that DKIM version 1 is used.
- k=rsa: "k" tells which Key type is being used. "rsa" is the default Key type.
- p=MIGfMA0... : "p" tells that a Public Key will be designated. In this case "MIGfMA0..." is the Public Key.
Please note: When filling in your DKIM record, it is important that you do not copy the quotation marks (") at the beginning and the end of the value. The same applies to forward and backslashes (/ and \). The quotation marks are added to the background by our DNS software; the slashes are also superfluous.
Please note when entering a DKIM record for a subdomain that you do not use the name of the domain name, but only the name of the key and the subdomain name without your primary domain, for example:
In the above mentioned example the full value after MIIBIjANBgkq... is a large series of letters and numbers.
Should you have any questions left regarding this article, do not hesitate to contact our support department. You can reach them via the ‘Contact Us’ button at the bottom of this page.
If you want to discuss this article with other users, please leave a message under 'Comments'.