DKIM

What is DKIM?

DomainKeys Identified Mail (DKIM) adds a digital signature to every email you send. The receiving server checks the signature against a public key in your DNS. This proves the email really came from your domain and wasn't changed on the way.

Add a DKIM record

Do this for each cold email domain.

Google Workspace

1. In the Google Admin console, go to Apps > Google Workspace > Gmail > Authenticate email
2. Select the domain
3. Select Generate new record, choose a 2048 bit key and keep the prefix as google
4. Copy the TXT record value Google shows
5. In Cloudflare, select the domain, go to DNS > Records and add:

Type	Name	Content
TXT	google._domainkey	v=DKIM1; k=rsa; p=MIIBIjANBgkqh... (the value you copied)

6. Wait about 15 minutes, then go back to Google and select Start authentication

Google's DKIM guide has more detail.

Zoho Mail

1. In the Zoho Mail Admin Console, go to Domains, select the domain, then Email configuration > DKIM
2. Select Add, enter a selector (for example zmail) and choose a 2048 bit key
3. Copy the TXT record value Zoho shows
4. In Cloudflare, select the domain, go to DNS > Records and add:

Type	Name	Content
TXT	zmail._domainkey	v=DKIM1; k=rsa; p=MIIBIjANBgkqh... (the value you copied)

5. Back in Zoho, select Verify, then make sure the key is set as the default