Skip to main content
dkim PROTOCOLHost: Google Cloud DNSStandard: RFC 6376

How to Configure DomainKeys Identified Mail (DKIM) on Google Cloud DNS

Cryptographically signs outbound emails using public/private key pairs to prove message integrity and authenticate sender domain. Follow this verified implementation guide to deploy standard compliant DKIM DNS records in Google Cloud DNS.

Default DKIM Record Syntax

// Authoritative RFC Example
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ...

Configuration Steps in Google Cloud DNS

  1. 1Open the Google Cloud Console and navigate to Network Services -> Cloud DNS.
  2. 2Click the name of the managed zone containing the record.
  3. 3Locate the dangling CNAME record row.
  4. 4Click the trash icon or select and click "Delete record set".
  5. 5Review the transaction change and apply.

Verification Checklist (RFC 6376)

Query the DNS selector TXT/CNAME record at <selector>._domainkey.yourdomain.com.
Validate key length (minimum 2048-bit RSA recommended, 1024-bit deprecated).
Confirm public key matching against outbound SMTP signature headers.
Ensure CNAME delegation targets an active, valid ESP key repository.
Live Validation Engine

Validate Your Google Cloud DNS DKIM Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator