Set up DKIM Record

DKIM — short for Domain Keys Identified Mail — is a security record that acts like a digital signature on every email you send, proving it really came from your domain and wasn't altered in transit. This article is for domain owners and admins who manage their own DNS settings and covers generating a DKIM record in Titan and adding it to your domain. Once it's verified, your outgoing Titan emails will be authenticated automatically, which helps keep them out of spam folders.

If your domain's DNS is hosted with one of these providers, use their dedicated guide instead — it'll match their exact interface:

• Hostinger
• HostGator
• WordPress.com

Not sure who hosts your DNS? Check with whatsmydns.net — enter your domain and look at the NS records. If your provider isn't listed above, the generic steps below will work.
 

Before You Start

• Access to the Titan Email Control Panel — where the DKIM record is generated.
• Access to your domain's DNS control panel — usually your domain registrar login, which may be different from your Titan login.

Learn more about DKIM records:

• What is DKIM record?
• How does DKIM work?
• Generate Custom DKIM record on Titan
• Add DKIM record to domain's DNS Zone
• Errors while sending emails due to DKIM Rejects

What is DKIM record?

A DKIM record is a security setting published in your domain's DNS that works like a digital signature attached to every email you send. When a message arrives with a DKIM signature, the receiving mail server checks it against the public DKIM record in your DNS to confirm the email genuinely came from your domain and wasn't changed along the way.

How does DKIM work?

Titan generates a matching pair of keys: a private key that stays with Titan and signs every outgoing email, and a public key that you publish in your domain's DNS. When another mail server receives your email, it looks up the public key in your DNS and uses it to verify the signature — confirming the message is authentic and hasn't been tampered with. DKIM works alongside SPF and DMARC as one of several layers of email security.

Generate Custom DKIM record on Titan

• Log in to the Titan Email Control Panel

  alert-warning

  If you are a Blacknight user, please log in to your email control panel using this link - https://manage-euc1.titan.email/

• Click on the banner Improve Email Reputation or navigate to Email Reputation tab in the sidebar

  image-shadow

• Under Add DKIM record click on Add and scroll down to view DKIM record.

  image-shadow

Add DKIM record to domain's DNS Zone

• Copy the DNS Host Name from Titan Email Control Panel once the DKIM record is generated as shown here
• Open your domain's control panel and navigate to its DNS Zone
• Create a new TXT record

• In the field Hostname paste the DNS Host Name value copied above

• Now copy the TXT record value & paste it in the TXT value field in the TXT record as shown below

  image-shadow

• Once TXT record is added, go back to Titan Email Control Panel, select the option of I've added TXT records in my DNS control panel and click on the Verify changes button

  image-shadow

What You'll See When It's Done

Your DKIM record will show as Verified in the Titan Email Control Panel. From this point on, your outgoing Titan emails are signed and authenticated automatically — there's nothing further to do.

Errors while sending emails due to DKIM Rejects

1. Error in DKIM public key, DKIM public key not found in DNS
   The DKIM public key record from your DNS is missing. Most commonly it can  happen due to some mistake while configuring dns records manually.  We request you to add back the same and then attempt to send an email.
2. Error in DKIM public key, invalid DKIM key format
   The DKIM key added to your DNS panel might have some incorrect values or incorrect formatting. Please ensure that you copy the exact DKIM value from the Control Panel. Once your DKIM key is reverified it may take some time to reflect the changes which should be up to your DNS TTL.
3. Error in DKIM public key, more than one TXT record in same selector
   The DKIM public record added to your DNS  has more than one TXT value. Titan doesn't allow multiple dkim key records to avoid conflicts under same selector. Hence, please ensure that you paste the exact value from the Control Panel. Once your DKIM key is reverified it may take some time to reflect the changes which should be up to your DNS TTL

Feel free to reach out to us at support@titan.email should you need any assistance with the above!