Skip to main content
How to configure DKIM for Office 365
Updated over a year ago

Step 1: Click on the domain you wish to configure DKIM on DKIM page (https://security.microsoft.com/dkimv2 or https://protection.office.com/dkimv2).

The DKIM page in the Microsoft 365 Defender portal with a domain selected

Step 2: Slide the toggle to Enable. You will see a pop-up window stating that you need to add CNAME records.

The Domain details flyout with the Create DKIM keys button

Step 3: Copy the CNAMES shown in the pop up window

The Publish CNAMEs pop-up window that contains the two CNAME records to copy

Step 4: Publish the copied CNAME records to your DNS service provider.

On your DNS provider's website, add CNAME records for DKIM that you want to enable. Make sure that the fields are set to the following values for each:

textCopy

Record Type: CNAME (Alias) > Host: Paste the values you copy from DKIM page. Points to address: Copy the value from DKIM page. TTL: 3600 (or your provider default)

Step 5: Return to DKIM page to enable DKIM.

The toggle to enable DKIM

If you see CNAME record doesn't exist error, it might be due to:

  1. Synchronization with DNS server, which might take few seconds to hours, if the problem persists repeat the steps again

  2. Check for any copy paste errors, like additional space or tabs etc.

If you wish to disable DKIM, toggle back to disable mode

Did this answer your question?