DKIM Signatures
DKIM (DomainKeys Identified Mail) cryptographically signs your outbound emails, proving they were authorized by your domain and have not been altered in transit.
What is DKIM?
When Render25 sends an email on your behalf, it attaches a digital signature to the message headers. The receiving mail server fetches your public key from DNS and uses it to verify the signature. If verification passes, the email is considered authentic.
Without DKIM, your emails are more likely to be flagged as spam, especially by Gmail and Microsoft mail servers.
Add DKIM CNAME Record
Render25 uses a CNAME-based DKIM setup, which means you point to our managed key. This allows us to rotate keys without you needing to update DNS.
| Type | Name | Value |
|---|---|---|
CNAME | r25._domainkey.yourdomain.com | r25._domainkey.render25.com |
Note
yourdomain.com with your actual domain. Some DNS providers require you to enter only the subdomain portion (e.g., r25._domainkey) without the root domain.Verify Signature
dig CNAME r25._domainkey.yourdomain.com +shortThe output should return r25._domainkey.render25.com. If it returns nothing, DNS has not yet propagated.