How to Configure and Test DKIM Records on SiteGround Site Tools

Configuring DomainKeys Identified Mail (DKIM) on your hosting account is essential for proving your emails are legitimate and preventing them from landing in the recipient's spam folder. SiteGround DKIM configuration involves generating a cryptographic public and private key pair, publishing the public record to your domain's DNS zone, and ensuring your mail servers sign outgoing messages with the private key.

Whether you are using SiteGround's native email hosting or routing your emails through an external provider while keeping your website on SiteGround, setting up this cryptographic signature protects your domain reputation. Let's walk through the exact steps to activate, configure, and thoroughly test your DKIM records using professional diagnostic commands and tools.

Understanding DKIM and How SiteGround Manages It

DKIM adds an invisible digital signature to the header of every outbound email. When a receiving mail server gets a message from example.com, it queries the public DNS for example.com to retrieve the public key. It then uses that key to mathematically verify the signature. If the check passes, the email provider knows the message truly originated from your domain and was not altered in transit.

SiteGround handles email authentication through its proprietary control panel, Site Tools. When you enable DKIM for a domain hosted on SiteGround, the system automatically generates the necessary TXT record, including a specific selector (commonly default._domainkey or a custom string assigned by the hosting environment) and a base64-encoded public key.

Step-by-Step SiteGround DKIM Configuration Guide

Follow these exact steps to activate and verify your DKIM records inside your hosting dashboard.

Step 1: Access Site Tools and Locate Email Authentication

1. Log into your SiteGround client area.
2. Navigate to the Websites tab and click the Site Tools button next to the domain you want to configure.
3. In the left-hand sidebar menu, locate and click on Email, then select Authentication.

Step 2: Select Your Domain and Generate the Key

1. Under the Email Authentication screen, look for a dropdown menu allowing you to choose your target domain if you manage multiple sites.
2. Locate the DKIM tab or section.
3. If DKIM is currently inactive, you will see a toggle switch or a button labeled Create or Activate. Click it.
4. SiteGround will automatically generate the public key and inject the corresponding DNS TXT record directly into your DNS zone if SiteGround manages your domain's nameservers.

Step 3: Verify DNS Record Creation

If your DNS is hosted externally (such as Cloudflare, Route 53, or a registrar's default nameservers), SiteGround will not automatically update your DNS. Instead, it will display the required DNS record details on the screen. You must manually copy these values and create a TXT record at your external DNS provider.

The typical record structure looks like this:

• Host / Name: default._domainkey (or selector._domainkey)
• Record Type: TXT
• Value / Content: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...

Before you finalize your setup, it is vital to validate your implementation. You can easily test your setup using the DKIM Checker tool to instantly verify if your public key is published correctly and matches the expected syntax.

Testing and Troubleshooting Your DKIM Setup

Once you have configured your DNS records, you need to verify that everything works correctly before sending production emails to clients.

Using Command-Line Tools to Query DNS

You can query your domain's public key directly from your terminal using dig or nslookup to ensure propagation is complete.

dig default._domainkey.example.com TXT

Sample Output:

;; QUESTION SECTION:
;default._domainkey.example.com. IN TXT

;; ANSWER SECTION:
default._domainkey.example.com. 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0..."

If this command returns the expected TXT string containing v=DKIM1, your DNS propagation is successful.

Comparison of DNS Management Scenarios

Common Mistakes and How to Fix Them

Even experienced administrators occasionally run into email delivery issues due to minor formatting errors. Avoid these common pitfalls:

1. Truncated Public Keys: The base64 string for a 2048-bit RSA key is long. Copying it manually from Site Tools and missing a few characters at the end will cause validation to fail. Always use the copy button provided in the dashboard.
2. Incorrect Selector Name: If your mail client sends mail using selector s1, but your DNS record is published under default._domainkey, verification will fail. Ensure the selector prefix matches your mail server configuration exactly.
3. Syntax Errors in External DNS: Some external DNS providers automatically append your root domain name to the Host field. If you enter default._domainkey.example.com into a provider that auto-appends, it results in a broken hostname like default._domainkey.example.com.example.com. Use default._domainkey instead, keeping an eye on your provider's preview pane.

DKIM Configuration Checklist

• Logged into SiteGround Site Tools and navigated to Email Authentication.
• Generated or verified the active DKIM key pair.
• Confirmed whether DNS is internal or external.
• Published the TXT record with the correct selector and base64 value.
• Verified record propagation using command-line tools or a diagnostic utility.
• Sent a test email to an external mailbox (like Gmail) and inspected the authentication headers.