Salesforce uses DKIM keys to sign outbound emails that your organization sends from the Salesforce platform.

Use the DKIM (DomainKeys Identified Mail) key feature to let Salesforce sign outbound email sent on your company’s behalf. These signatures give recipients confidence that the email was handled in a way that’s consistent with your company.

To ensure your email message from Salesforce do not end up unread in the recipient’s spam folder,you can  easily implement DomainKeys Identified Mail (DKIM).Use the DKIM (DomainKeys Identified Mail) key feature to enable Salesforce to sign outbound emails sent on your organization’s behalf. A valid signature provides recipients confidence that the email was handled by a third party such as Salesforce in a way authorized by your organization.

Make sure you add the public key to your DNS record before you make your key active in Salesforce and start DKIM signing. DKIM signing is active whenever your DKIM key is in the active state.

Note:

DKIM avoid sending emails to Spam Folder.

To Create DKIK Keys, use the following steps.

1. Go to DKIM Keys in Salesforce Setup.

2. Click “Create New Key” button.

3. Select the Key Size and Domain Match. Enter Selector and Alternate Selector values. Click “Save” button.

4. Copy the CNAME and Alternate CNAME records and add it in the DNS for your domain.