Skip to main content
dkim PROTOCOLHost: Vercel DNSStandard: RFC 6376

How to Configure DomainKeys Identified Mail (DKIM) on Vercel DNS

Cryptographically signs outbound emails using public/private key pairs to prove message integrity and authenticate sender domain. Follow this verified implementation guide to deploy standard compliant DKIM DNS records in Vercel DNS.

Default DKIM Record Syntax

// Authoritative RFC Example
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ...

Configuration Steps in Vercel DNS

  1. 1Open the Vercel Dashboard and navigate to the Team Settings or Project Settings.
  2. 2Go to "Domains" and select your root domain.
  3. 3Scroll to the DNS Records table.
  4. 4Find the CNAME record for the subdomain.
  5. 5Click the three dots menu (...) and select "Delete".

Verification Checklist (RFC 6376)

Query the DNS selector TXT/CNAME record at <selector>._domainkey.yourdomain.com.
Validate key length (minimum 2048-bit RSA recommended, 1024-bit deprecated).
Confirm public key matching against outbound SMTP signature headers.
Ensure CNAME delegation targets an active, valid ESP key repository.
Live Validation Engine

Validate Your Vercel DNS DKIM Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator