Enable DKIM at domainfactory
In the domainfactory customer menu enable DKIM for the domain under "Email"; with external name servers create the record shown yourself.
Other senders sign separately
Every service sending on behalf of the domain needs its own DKIM key with its own selector: the newsletter tool, the CRM, Microsoft 365. The records do not interfere because each lives under a different selector. DMARC then covers all of them.
How to add the DKIM record at domainfactory
The way to the domainfactory DNS editor:
- In the domainfactory customer menu open "Domains" and select the domain.
- Open "Name server settings" and create a new record.
- Type and name as shown by the mail provider: usually CNAME or TXT under selector._domainkey. The selector name goes before _domainkey, the host appends the rest of the domain.
- Enter type, host name and value, save.
Typical mistakes at domainfactory
- Selector missing or misspelled in the name, so the receiver finds no key.
- TXT value truncated for long keys or split into several records.
- CNAME next to other records on the same name.
- DKIM enabled in the control panel but the name servers are elsewhere and the record is missing there.
Verify and keep an eye on it
After saving, the change at domainfactory usually applies within minutes. The checker below queries the authoritative name servers and shows right away whether the DKIM record is read correctly. DomainWarn keeps checking the record afterwards and alerts you when it changes or disappears, for example after a migration or one click too many in the DNS editor.
Frequently asked questions
- Why does the checker find no DKIM record after enabling it at domainfactory?
- Either the name servers are not at domainfactory and the record is missing there, or the selector differs from the common ones. Enter the selector name from the domainfactory control panel in the DKIM checker.
- Which key length is right?
- 2048 bits. 1024 bits is considered too short, longer keys do not fit every DNS editor.