How do I set up DKIM authentication records for my domain?

In order to ensure industry leading deliverability, AWeber authenticates all messages we send for our users automatically. While AWeber does basic authentication for you automatically, it is a best practice and a Google/Yahoo requirement to also authenticate your own domain name to build the best email sending reputation possible. 

Creating custom DKIM records through your domain DNS provider tells the world that the emails you send from AWeber are valid and authorized. Below, we will cover how to create these records, and how to ensure they are configured properly.

For more information on the standards that affect the deliverability of email messages, review our complete article on email authentication. 

Step 1: Verify your email in AWeber

Visit the "Domains and Addresses" page found under your account settings. 

Enter your From Address in the "Email Addresses" section and click "Send verification."

You will now see your domain and From address on the account settings page. If your email address still needs to be verified, it will be listed as "pending."



You will receive an email from help@aweber.com asking you to verify your email address. Click the button to complete the process.


Your domain is now verified! 

Step 2:  Add DKIM for your domain

Automatically add your DKIM records

To setup your DKIM records, we recommend using our automated option, that will add the necessary records for you. This currently supports 40+ providers.

To start, simply connect the blue "Connect Domain" text next to the domain you wish to setup DKIM for on the Domains & Addresses page in your account.

Once you've done this a popup will appear prompting you to connect your domain to AWeber, simply click the "Continue" button.

After a few moments of loading you'll be prompted to insert your login credentials for your domain provider or authorize directly via the domain provider you're using. Simply fill out the credentials and click "Continue."

If it directs you to the domain provider, follow along with the prompts within your domain providers until the records have been setup.

It will take a few moments to authenticate the domain and setup the records automatically for you. Once it's complete it will inform you that your domain has been configured.

You're done, your domain is now fully setup with both DKIM and DMARC if you've gone through this process, you don't need to do it again to setup DMARC.

Manually add your DKIM records

If you don't have the option to connect your domain automatically then you'll need to login to your DNS domain provider's website to create DNS entries.

Find quick links to your DNS providers setup instructions.

Visit the "Domains and Addresses" page found under your account settings. 

Click the cogwheel icon to the right of your domain to access the DKIM setup instructions. Follow along the instructions to add three CNAME records to setup DKIM.

Create three new CNAME records with the following information:

Please note: replace example.com with your domain. Depending on your domain provider, you may or may not need to include your domain in the host name. Check our DKIM tweaks list or consult your domain provider for this information.

Why does AWeber ask you to create three CNAME records while other platforms only ask you to create one? To keep up with best practices, we rotate DKIM keys periodically to make sure they stay secure. Having three records allows us to do this rotation automatically without any action by yourself. Other platforms don't rotate their DKIM keys which can cause lower email deliverability due to compromised security.

Verify your DNS records

Once your records have been published, your domain will appear in AWeber as DKIM authenticated as seen on the Domains & Addresses page in Account Settings. Mail sent from AWeber for that email address will now be signed automatically with DKIM.

Note, if your domain isn't authenticating after setting up your DNS records properly, you may simply need to wait up to 48 hours for servers to see those changes.

Next be sure to publish a DMARC record to achieve full authentication if you haven't automatically connected your records.