Introduction
DKIM (DomainKeys Identified Mail) is an essential email authentication method that helps protect your domain from email spoofing and ensures your emails reach their intended recipients. In this guide, we’ll walk you through the steps to enable DKIM in Microsoft Defender for Office 365.
Step-by-Step Guide
1. Log into the Microsoft 365 Defender Portal
To get started, log into the Microsoft 365 Defender portal using your admin account. https://security.microsoft.com/
2. Navigate to DKIM Settings
Once you’re logged in:
- Select Email & Collaboration from the left-hand navigation pane.
- Under Policies & Rules, click on Threat policies.
Find and select DKIM to open the DKIM under Email Authentications settings
3. Create DKIM DNS Records
Next, you’ll need to create DKIM DNS records for your domain:
- Select the domain you want to enable DKIM for.
- You will see two CNAME records that need to be added to your DNS. These records will look something like this
. - Copy these CNAME records.
Host Name : selector1._domainkey
Points to address or value: selector1-jameseduard-com._domainkey.5fq7kx.onmicrosoft.com
Host Name : selector2._domainkey
Points to address or value: selector2-jameseduard-com._domainkey.5fq7kx.onmicrosoft.com
4. Add CNAME Records to Your DNS
Now, add the copied CNAME records to your DNS management console (this could be your domain registrar or hosting provider). on my side i use Cloudflare DNS, (https://dash.cloudflare.com/)
5. Enable DKIM Signing
After adding the CNAME records:
- Return to the Microsoft 365 Defender portal.
- In the DKIM settings, select your domain and click Enable.
6. Verify DKIM Configuration
Finally, verify that your DKIM configuration is correct:
- Use online tools like MXToolbox to check your DKIM setup.
- Send a test email to ensure that DKIM signing is working as expected.
Conclusion
Enabling DKIM in Microsoft Defender for Office 365 is a crucial step in securing your email communications. By following these steps, you can ensure that your emails are authenticated and protected from spoofing.
If you have any questions or run into any issues, feel free to reach out for help!
