Adding DKIM Records in cPanel: Step-by-Step DNS Guide
How to add DKIM DNS records in cPanel. Step-by-step guide covering the cPanel DNS Zone Editor, TXT record setup, and DKIM verification.
Last updated: 2026-05-05
This guide is part of our Setup & Configuration resources.
cPanel is one of the most widely used hosting control panels for shared and reseller hosting. If your website is hosted on a cPanel server, you can add DKIM records directly through the built-in DNS tools. This guide covers the two main approaches: the Zone Editor (available on every cPanel installation) and the Email Deliverability section (available on many newer versions). For a broader overview of the DKIM setup process, see our complete DKIM guide.
Some hosting providers customize their cPanel installations, so menu labels and locations may differ slightly from what you see here. The core steps remain the same.
Before You Start
You'll need:
- cPanel login credentials for your hosting account
- A DKIM public key from your email provider or generated with DKIM Creator
- Your selector name (e.g.,
default,mail, or one provided by your email service) -- not sure which one to use? See how to find your DKIM selector - Your domain name as it appears in cPanel
If you do not already have a DKIM key pair, generate one with DKIM Creator before continuing. You will need the public key DNS record value (the string starting with v=DKIM1;) and the selector you chose.
Option A: Using cPanel's Email Deliverability Tool
Many cPanel installations include a dedicated Email Deliverability section that can handle DKIM setup automatically. This is the easiest path if your hosting provider has it enabled.
Log in to cPanel
Open your hosting provider's cPanel login page and sign in. You can usually access cPanel at yourdomain.com/cpanel or yourdomain.com:2083, though your host may use a different URL.
Find the Email Deliverability section
In cPanel's home screen, look for the Email category. Click Email Deliverability. Some older cPanel versions label this as Authentication or DKIM/SPF instead.
Select your domain
If you have multiple domains on your account, choose the domain you want to configure. cPanel will show the current status of DKIM, SPF, and reverse DNS for that domain.
Enable or repair DKIM
If DKIM shows a problem or is not configured, click Manage or Repair. cPanel will generate a DKIM key pair and publish the DNS record automatically.
Confirm the record
After the repair completes, the status should change to a green indicator. cPanel has now added the DKIM TXT record to your DNS zone and configured your server to sign outgoing mail.
The Email Deliverability tool works best when cPanel also manages your DNS. If your domain's nameservers point elsewhere (for example, Cloudflare), cPanel cannot update DNS automatically. In that case, copy the record values from this screen and add them manually at your DNS provider.
Option B: Using the Zone Editor (Manual Method)
The Zone Editor is available on all cPanel installations and gives you full control over your DNS records. Use this method when you need to add a DKIM record for a third-party email service, or when the Email Deliverability tool is not available.
Log in to cPanel
Sign in to your cPanel account through your hosting provider's login page.
Open the Zone Editor
In the Domains category, click Zone Editor. Some cPanel themes list this under DNS or label it Advanced DNS Zone Editor.
Select your domain
Find your domain in the list and click Manage. This opens the full DNS zone for that domain.
Add a new TXT record
Click Add Record and select Add "TXT" Record from the dropdown. cPanel will display fields for the record name, TTL, type, and value.
Enter the record name
In the Name field, enter your selector followed by ._domainkey.yourdomain.com. (include the trailing dot). For example, if your selector is mail and your domain is example.com, enter mail._domainkey.example.com.
Some cPanel versions append the domain automatically. If that is the case, just enter mail._domainkey without the domain portion.
Enter the record value
In the Record or TXT Data field, paste the full DKIM record value. This is the string that starts with v=DKIM1; k=rsa; p= followed by your base64-encoded public key.
Set the TTL and save
Set the TTL to 14400 (4 hours) or 3600 (1 hour). Then click Add Record or Save to create the entry.
Need a DKIM key pair?
Generate DKIM keys in your browser. Copy the DNS record value and paste it into cPanel's Zone Editor.
Zone Editor Record Format
Here is what your completed record should look like in the Zone Editor. For more format examples, see DKIM record examples.
| Field | Value |
|---|---|
| **Name** | `selector._domainkey.yourdomain.com.` |
| **TTL** | 14400 (or 3600) |
| **Type** | TXT |
| **Record** | `v=DKIM1; k=rsa; p=MIIBIjANBgkq...` |
Pay attention to whether cPanel auto-appends your domain name. If you see mail._domainkey.example.com.example.com in the zone file, you have entered the domain twice. Remove the extra portion and save again.
Which Method Should You Use?
| Feature | Email Deliverability | Zone Editor |
|---|---|---|
| Generates keys for you | Yes | No (bring your own key) |
| Works with cPanel email | Yes | Yes |
| Works with third-party providers | Limited | Yes |
| Requires manual DNS entry | No | Yes |
| Available on all cPanel versions | Newer versions only | Yes |
For most small business owners using cPanel's built-in email, the Email Deliverability tool is the fastest option. If you use Google Workspace, Microsoft 365, or another external email service, use the Zone Editor to add the records those services provide.
Verifying Your DKIM Record
After adding the record, confirm it is working:
Wait for DNS propagation
DNS changes on cPanel servers typically propagate within 1-4 hours, though it can take up to 48 hours in some cases.
Check the record with a lookup
Use a terminal or online DNS lookup tool to query your record:
dig TXT selector._domainkey.yourdomain.com +short
You should see your DKIM record value in the response.
Send a test email
Send an email to a Gmail address and view the original message headers. Look for dkim=pass in the Authentication-Results header to confirm signing is active.
Common cPanel DKIM Issues
Record name includes the domain twice
cPanel may auto-append your domain. If you enter mail._domainkey.example.com and cPanel adds .example.com again, the record will not work. Enter only mail._domainkey if cPanel handles the rest.
Email Deliverability tool is missing Not all hosting providers enable this feature. Some disable it on shared hosting plans or replace it with their own tools. Use the Zone Editor as a reliable fallback.
Long TXT record errors 2048-bit DKIM keys produce long records. cPanel's Zone Editor generally handles them fine, but if you see an error, paste the value as a single line without any line breaks or extra spaces. If the problem persists, try a 1024-bit key. See DKIM record too long for more solutions.
DNS managed externally If your domain's nameservers point to Cloudflare, Route 53, or another external DNS provider, changes made in cPanel's Zone Editor will have no effect. Add the record at your actual DNS provider instead.
DKIM still failing after adding the record Double-check that your mail server is configured to sign outgoing messages with the corresponding private key. The DNS record only publishes the public key. Without server-side signing, DKIM verification will not pass.
Related Articles
References
- RFC 6376 — DomainKeys Identified Mail (DKIM) Signatures
- RFC 1035 — Domain Names — Implementation and Specification
- cPanel — DNS Zone Editor documentation
cPanel makes DNS management accessible, even if you have never touched a DNS record before. Generate your keys and add them in minutes.
Generate DKIM keys for cPanel
Create your DKIM key pair instantly. Copy the DNS record and paste it into cPanel's Zone Editor.
Generate DKIM Keys