DKIM Reporting and Performance

The first goal of this page should be to get any recognized domain in the Non-DKIM Aligned Domains section into the DKIM Aligned Domains section. You can check for support and see if we provide instructions for your provider on our Outbound Email Provider Page. If your domain is aligned, it will help you pass DKIM easier, which will also help you pass DMARC easier, improving your mail delivery.

If you see a high number of failures for a legitimate outbound email source, you should check the settings or use our Email Delivery Tool to see why messages from a source are failing.

DKIM Aligned Domains

DKIM Aligned Domains includes all aligned domains found in messages that you sent. This means that your root domain was found in them. DKIM Alignment occurs when the domain in your "FROM" header matches the domain used in the DKIM signature (d=domain.com).

Non-DKIM Aligned Domains

Non-aligned domains might still be legitimate email for you, but they have not been configured with your domain as the DKIM domain. This often occurs when you use a 3rd-party, such as Google GSuite or Microsoft Office 365, to send your mail or if someone is forwarding your messages.

Selectors

Selector Syntax

According to the RFC 6376, a DKIM selector is essentially a subdomain label and must comply with the rules for domain names in DNS.

1. Alphanumeric and can contain hyphens
2. Can not start or end with a hyphen
3. Must be between >= 1 and <= 63 characters long

Empty Selectors

You may see "No selectors reported" in some cases. This does not mean there is a problem with your email. DMARC Reports usually contain information on the DKIM selector in the messages received by the inbox provider. However, sometimes the inbox provider does not provide the actual selector, but still reports wheter DKIM passed or failed.

None

If you see a "None" designation in the DKIM Domain category, it means that no DKIM signature was included on the associated email(s).