How to Set Up DKIM for Zendesk

Enable DKIM signing for Zendesk support emails by publishing two CNAME records for Zendesk's DKIM selectors.

Quick Answer — The Record You Need

Record Type

CNAME

Host / Name

zendesk1._domainkey

Value

zendesk1._domainkey.zendesk.com

You need two CNAME records: zendesk1._domainkey and zendesk2._domainkey.

Step-by-Step Setup

Log in to Zendesk Admin Center

Go to your Zendesk Admin Center.

Navigate to email settings

Go to Channels > Email. Find the DKIM or domain authentication section.

Enable DKIM for your domain

Zendesk will display two CNAME records you need to add to your DNS.

Add the CNAME records

Create both CNAME records in your DNS provider.

zendesk1._domainkey.yourdomain.com  CNAME  zendesk1._domainkey.zendesk.com
zendesk2._domainkey.yourdomain.com  CNAME  zendesk2._domainkey.zendesk.com

Enable digitally signed emails

In Zendesk Admin, toggle on "Enable digital signatures" once the CNAME records have propagated.

Common Gotchas

Zendesk uses CNAME records for DKIM with selectors zendesk1 and zendesk2. Both records are required.
You must enable digital signing in the Zendesk admin after adding DNS records. It does not activate automatically.
DKIM records may take up to 48 hours to propagate. If Zendesk cannot verify immediately, wait and try again.

Verify Your Setup

After adding your DNS records, use our free DKIM checker to verify everything is configured correctly. DNS changes typically propagate within minutes, but can take up to 48 hours.

Frequently Asked Questions

What DKIM selectors does Zendesk use?

Zendesk uses zendesk1 and zendesk2 as DKIM selectors, published as CNAME records.

Does Zendesk rotate DKIM keys?

Yes. Since the records are CNAMEs pointing to Zendesk-managed DNS, keys can be rotated without DNS changes on your end.

Can I use DKIM with Zendesk on a subdomain?

Yes. If your support email uses a subdomain, add the DKIM CNAME records for that subdomain.