Managing the DKIM Feature

Discover how to manage DKIM security for your email notifications

Last Updated

June 17th, 2019

Reading Time

2 min

User Level


Docebo uses DomainKeys Identified Mail (DKIM) as a method to validate the platform domain name identity associated with the email messages sent by LMS via the Notification App, so that they will not end up in a recipient’s junk email folder.

Only Superadmins can manage the DKIM email security app; Power Users will not see the DKIM section in the Admin Menu. DKIM is available both for Enterprise and for Growth plan customers.

Generating DKIM Records for Your Domain

In order to generate the DKIM records for your domain, access the Admin Menu by scrolling your mouse over the gear icon and click on Advanced Settings option in the Settings section. Move to the Email Preferences settings and click on the Manage DKIM Keys button. You will then be redirected main management page of the app, listing the domains already associated with DKIM records. Please note that the DKIM area is fully accessible in the Email Preferences area even when the White Label app is active, for all the domains in your Multidomain.

Press the plus button in the top right corner to generate the DKIM records for your domain. Please note that DKIM records are unique for each domain and it is thus not possible to generate DKIM records for the same domain more than once. If you are using the Multidomain App, you have to generate a DKIM record for every client you defined.

Type your domain name and press Generate Keys. The platform will generate three keys:

– Public Key. DNS public key used by the recipient systems to verify the emails sent from your domain.

– Selector. The selector, together with the domain name, is used by recipient servers to verify the email sender.

– Configuration Text. For those using a Bind DNS server, this text field shows the configuration in Bind 9 format.

Copy and paste these keys in the corresponding fields of your DNS. Once DKIM records have been generated, your domain will be listed in the DKIM Activation page, together with the corresponding Public Key and the Selector value.

After copying and pasting the generated keys in your DNS, click the ellipsis icon at the end of the domain row and select Verify & Activate to complete the association between your domain and the DNS server. Remember that the DKIM email security will not be active if you do not execute this step.

Whenever you need to retrieve the generated keys, click on the ellipsis icon and select View Info. Always copy the values of the keys associated to your domain from this panel, do not use the values displayed in the DKIM Activation page, since they may not be fully displayed and you may thus copy an incomplete value.

Regenerating DKIM Keys for Your Domain

Whenever you need to regenerate the DKIM records associated to your domain, first delete the keys currently in use. To do so, click on the ellipsis icon at the end of the domain row, and select Delete. When DKIM records are deleted, their association with your domain is lost.

You are now ready to generate new DKIM records by following the procedure described in the previous section of this article.