DKIM adds a cryptographic signature to every message your server sends. The receiving server checks it against a public key published in your DNS, proving the message came from your domain and wasn’t altered.
Enable DKIM
- Open E-mail Manager then E-mail Accounts.
- Look for the Enable DKIM option for your domain and select it.
- DirectAdmin generates a key pair and, if your DNS is at Traxio, adds the public key to your DNS automatically.
If DKIM is already enabled, you’ll see the option to disable it instead. Leave it on.
Check the record exists
Open Account Manager then DNS Management and look for a TXT record named:
x._domainkeyIts value starts v=DKIM1; k=rsa; p= followed by a long key. Check it from outside:
dig x._domainkey.yourdomain.co.uk TXT +shortIf your DNS is elsewhere
DirectAdmin can sign messages, but the public key must be published where your DNS is live.
- Copy the
x._domainkeyTXT record’s value from Account Manager then DNS Management. - At your DNS provider, add a TXT record named
x._domainkeywith that value. - Paste it exactly; the key is long and a single missing character breaks it.
SPF, DKIM and DMARC when your DNS isn’t at Traxio
Testing DKIM
Send a message to a Gmail address, open it, and choose Show original. Look for DKIM: 'PASS' with your domain.
Common problems
| Problem | Cause |
|---|---|
| DKIM: fail | Key in DNS doesn’t match (copied incorrectly or regenerated) |
| No DKIM result | Mail sent through another service, or DKIM not enabled |
| Passes, but DMARC fails | Message signed by a different domain than the From address |