DKIM is a security protocol for authenticating your emails and preventing them from getting tampered with before they get delivered. We recommend implementing DKIM in combination with DMARC even if you have SPF configured, for that added security benefit and to withstand forwarding scenarios.
To enable your Twilio SendGrid DKIM setup, there are a few prerequisites to get started:
Determine who your DNS hosting provider is
Gain access to your DNS management console or your hosting provider who can help you edit your DNS settings
Steps to Enable DKIM for SendGrid Domains
In order to enable DKIM for SendGrid, you can either take the automated approach or the manual approach. Let’s discuss both ways as explained in SendGrid's guide to domain authentication.
Automated SendGrid DKIM Setup
This section is only useful for you if your hosting provider is Godaddy. The automated feature is currently available for Godaddy users only.
To enable DKIM for Twilio SendGrid automatically, go through the following steps:
Login to your SendGrid account
Go to Settings > Sender Authentication > Authenticate Your Domain by clicking on Get Started
Now choose your DNS Host (GoDaddy, Bluehost, Cloudflare) from the options and click on Next.
Enter the domain name you would like to authenticate and click Next.
You can click on Advanced Settings and keep Use automated security selected before proceeding.
Once you click on Next, the Install DNS Records page will appear. At this stage, SendGrid will determine where automatic setup is available for your domain. If it is available you will be redirected to the Automatic Setup tab.
Click on the “Connect” button in the Automated Setup tab.
A dialog box will appear prompting you to connect your DNS host to Twilio SendGrid for your domain along with a window to establish a connection with your DNS host.
Log in to your DNS management console and complete the steps to connect your domain. Once successful you can close this window.
SendGrid will now try to verify your connection. Note that this can take from a few hours to 48 hours. If verification is still unsuccessful you can contact SendGrid support for assistance.
Once verification is successful, you will have enabled DKIM for SendGrid using the automated setup.
Manual SendGrid DKIM Setup
To enable DKIM for Twilio SendGrid automatically, go through the following steps:
Login to your SendGrid account
Go to Settings > Sender Authentication > Authenticate Your Domain by clicking on Get Started
Now choose your DNS Host (GoDaddy, Bluehost, Cloudflare) from the options and click on Next.
Enter the domain name you would like to authenticate and click Next.
You can click on Advanced Settings and keep Use automated security selected before proceeding.
Once you click on Next, the Install DNS Records page will appear. At this stage, SendGrid will determine where automatic setup is available for your domain. If it is not available you will be redirected to the Manual Setup tab.
You will now be able to see 2 DKIM CNAME records (Selector1 – s1 and Selector 2 – s2).
Now you may publish these DNS records by accessing your DNS management console or contacting your DNS hosting provider.
Once completed, you should allow your DNS some time to process these changes.
Finally, head back to the Twilio SendGrid portal and click on Verify.
If your records get verified successfully, you have enabled DKIM for SendGrid. Otherwise, check your DKIM record using our free DKIM record lookup tool or contact SendGrid for assistance in troubleshooting.
Note that DKIM alone cannot protect you against phishing, spoofing, or impersonation attacks. A DMARC analyzer in combination with DKIM is a perfect solution for your email security problems. Sign up today for a free trial!