How to Set Up DKIM for HubSpot

Enable DKIM signing in HubSpot by publishing the CNAME records it provides for your email sending domain.

Quick Answer — The Record You Need

Record Type

CNAME

Host / Name

hs1._domainkey

Value

yourdomain-com.hs01a.dkim.hubspotemail.net

HubSpot generates two CNAME records (hs1 and hs2 selectors). Copy exact values from your HubSpot settings.

Step-by-Step Setup

Log in to HubSpot

Go to app.hubspot.com and sign in.

Navigate to email sending domains

Go to Settings > Website > Domains & URLs > Email Sending Domains.

Connect your domain

Click "Connect a domain" and enter your sending domain. HubSpot generates the DKIM CNAME records.

Add the CNAME records to DNS

Create the CNAME records in your DNS provider as shown by HubSpot.

hs1._domainkey.yourdomain.com  CNAME  yourdomain-com.hs01a.dkim.hubspotemail.net
hs2._domainkey.yourdomain.com  CNAME  yourdomain-com.hs01b.dkim.hubspotemail.net

Verify in HubSpot

Click "Verify" in HubSpot. Once DNS propagates, HubSpot will confirm DKIM is active.

Common Gotchas

HubSpot provides two CNAME records with selectors hs1 and hs2. Both must be published.
The CNAME values contain your domain name with dots replaced by dashes (e.g., example-com). Copy them exactly from HubSpot.
If your DNS provider does not support CNAME records at the specified hostnames, contact HubSpot support for alternative TXT record options.

Verify Your Setup

After adding your DNS records, use our free DKIM checker to verify everything is configured correctly. DNS changes typically propagate within minutes, but can take up to 48 hours.

Frequently Asked Questions

What DKIM selectors does HubSpot use?

HubSpot uses hs1 and hs2 as DKIM selectors, published as CNAME records pointing to HubSpot-managed keys.

Does HubSpot rotate DKIM keys?

Yes. Since DKIM records are CNAMEs pointing to HubSpot-hosted keys, HubSpot can rotate keys without requiring DNS changes.

Can I use HubSpot DKIM with a subdomain?

Yes. If you send from a subdomain, configure the DKIM records for that subdomain during the domain connection process.