[ Setup article ]

How to Setup DKIM for Zendesk?

1 min readBy Team EA

Zendesk navigation menu with Email settings

DKIM (DomainKeys Identified Mail) is an email authentication protocol that helps prevent phishing, email spoofing, spamming, and other cyber attacks that use emails to break into an organization’s or individual’s system. It legitimizes the emails so that recipients are aware that the email originated from a particular organization. 

For detailed information on DomainKeys Identified Mail, read more on What is DKIM?

NOTE: Before you can digitally sign your emails from Zendesk, you will need to update the Domain Name System (DNS) records of your domain so that Zendesk can verify your signatures.

This article will be a step-by-step process to setting up DKIM on your Zendesk account, making your emails more secure and spoof-free. 

We will break it into two simple steps: 

  1. Adding your Domain Key to the DNS records
    1. Log in to your domain registrar’s control panel.
    2. Find ‘Change DNS records’ and click on it. Depending on your domain registrar, it may also be called ‘DNS Management’, ‘Name Server Management’, or ‘Advanced Settings’.
    3. Look for the option ‘Create CNAME records’. 
    4. Head to Zendesk and navigate to ‘Admin > Channels > Email’.
      Zendesk navigation menu with Email settings
    5. Go to ‘Custom Domain for DKIM’.
      You’ll find two CNAME records, namely:zendesk2._domainkey.your_email_domain.comzendesk2._domainkey.zendesk.com
    6. Copy these and enter them into your Domain Registrar’s panel, which you opened earlier, and ‘Publish’ them.
  1. Enabling digital signatures in Zendesk
    1. On Zendesk, click ‘Manage’ and select ‘Email’ from ‘Channels’.
    2. Scroll down to the option called ‘Custom Domain for DKIM’ and select the ‘Enable’ option.
    3. Click on ‘Save’, and the setup is complete.

[ DKIM guide ]

Part of the Knowledge BaseSending-service implementation guides · 365 guides

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ Keep reading ]

All posts