How to Setup DKIM Keys and DNS Text Record Entry Name : [Your Selector/Key]._domainkey.YourDomain.com. Value : v=DKIM1;p=[YourPublicKey] Selector : Key001
You just solved my biggest problem man. This has been haunting me for a year now, funny i found your video this late. I just cant explain how i feel. Thanks A Lot!!!
Hello man, I want to ask a question to you as this DKIM setup has solved your problem. I am also having an issue on my mail server, mail to yahoo or mail from yahoo cannot be sent as yahoo has blocked our domain. So, I have talked with yahoo and they did not give us the right solution but said to follow the best way to setup SMTP-server. So after research, I found that DKIM with postfix can fix this issue. So, I want to know if you were having the same kind of issue and if after following this tutorial you have solved this issue then I would also like to follow the procedure. P.S.: If you see this comment, please respond. I am having a major issue with our yahoo clients. I hope you understand :)
@@sushankunwar8875 chances are Yahoo is also partially relying on third-party data such as Blacklist excetera. Email problems are nasty to deal with especially with some areas being a black hole. For example this past weekend Gmail had some major issues. Let me know your email if you want to talk about it
first of all, that's not bitrate, rather the LENGHT of the rsa key. Secondly, I think for maximum security one must use a tool running in your own emviroment, as using a hosted RSA keypair generator basicly gives the hoster of that tool to scrape and store your public and private key. Furthermore, adding the dot at the TLD of your domain is nothing new. That's the root. Otherwise it's a good tutorial, just thought you might appreciate my cyber security inputs :) Cheers!
This is extremely helpful until sterp 3 for me. I use Apple and Media Temple, and I have no idea where my mail server is, or how to add the private key in either Apple mail or Media Temple.
I have the same question and the same problem. I use apple and I have no idea what or where my mail server is. I tried to search in google. No answers.... Did you find any solution??
@@fotomundos1 I did a whole bunch of DIY work and research to fix this, which did not work. I could not understand where apple's mail server is. I am just using instead gmail, a lot more, as my personal email is getting worse.
Thanks! I'll try to get this working on my Linux box. Most videos on SPF, DKIM and DMARC work their examples on Windows Server + some Windows-only mailer, but no biggie.
Lazy or not its the dummest thing you can do. Your private key is suppose to be private, if you use a public service you might as well not bother setting up DKIM in the first place.
I've loved this video until step 3. Interesting enough, I have not been able to find this step slowed down anywhere, I don't even know where to find this screen in my computer at it's blurry on the video... If someone could break this step down, it would be great!
I've added my public key to my DNS records but how do I add the private key to my Outlook software? Doesnt it need to be done server side which would be my web host?
hey, with my domain host. if I add a dns record with DKIM it wants a prefix and value. And if I put the name, in the Prefix. It says "CNAME entry is required"
OK, what if I am using Microsoft 365 Defender and GoDaddy. Do I put both Public and Private keys on the DNS?? In other words, by machine is not my email server, Godaddy is I think.
Man I have created my own SMTP provider on Windows Server 2016 about a while ago, then it works very well and I don't have any problem except the delivery status, I got the emails into the JUNK folder. I asked a friend to solve this problem but he told me that I need to set the SPF, RDNS, MX-Records to get a high rate of email delivery, I hope to find me a right solution for this issue :)
There is a way to use OPENSSL and it's pathetically simple. However... getting it all setup is a bitch. If you're on Windows the easiest way is to use the GITHub windows installer which comes with a version of OPENSSL. Then just use that one. It's weird... but easier than going through the OPENSSL Source which is only written for LINUX and requires Shady 3rd party installers.
there are so many different male servers I could never know the mall. If it's not very intuitive then chances are it's not very well developed so you might consider something else
Thank you, lot of reading trying to understand, finally a visual lesson make me understand. So may I asking a question, I point the NS to cloudflare then the email server is on cloudflare or in strato that is where I get the domain name and configured the user and password before I forward the NS.
Okay. You need access to the server that hosts your email for your domain. If you don't know what I'm talkin about chances are you're using email from a service provider such as Google or Yahoo. hMailServer is just one of many choices of email servers for private use. That is simply the one I chose to demonstrate on there are many others to choose from. If that does not explain it please post the details of your situation and what you're trying to do
I'm not an expert on that factor.. but I would think it would be ok. Not much different than having the same password for multiple places. As long as the key resolves properly per domain.. I would Think it would be ok. But again.. I'm not an expert.
Hi, your tutorial on DKIM is excellent. i also create DKIM for my domain on hmailserver but all email client showing my dkim is failed. As error is dkim=neutral (body hash did not verify). how to resolve this? And can we give space in v=DKIM1;(space) t=s;(space)k=rsa;(space)p=publickey ??
If you did not try the generator are used in the video try another generator that might give a more clear output of the key. A failure in the HASH implies that it is a problem with the key generation
any idea how or if it is even possible to add the private key to MS IIS 6 SMTP on Windows 2012 Server. I've seen some third party tools, but no mention of it on Microsoft's site that I can see. great video by the way.
No... Historically IIS is : NOT Friendly ( which is why most of us end up using a 3rd party email server ). Like your self I would also like to use the native windows components without involving a 3rd party mess. But over the years I just gave up and use HMail server : Which has been pretty good. Chances are you will arrive at the same conclusion... sorry.
Can you guide me how to enter (setup) private key with goDaddy cpanel? Please note that I don't have access of WHM in goDaddy for my domain, and goDaddy people have no "Authentication" options under email category of cPanel. Any help....?
@@RAZR_Channel we are not spamming peoples 🙄🙄 solving some one's problem do you thing its a spam? Spam is just your gonna bombard weird stuff to people that they dont want.
@@xtylishjutt9504 As I mentioned.... you need to accept that : You are SPAMMING. Your industry is the reason we have to deal with all this technical bullshit just to send an email. TLS,SPF, DKIM, DMARC, RDNS and on and on to fend off SPAMMERS.
what part are you on... ? If it's key generation... try another generator online if it's entering into the DNS or Email server.... you may have to remove any forbidden characters
My issue is it does not allow to save the Host name as zoho._domainkey.domain name Because it says "Server name can be use letters hypens and dots only" it does not allow to use the symbol underscore ( _ )
This is a helpful video, but DO NOT use a service to generate the keys for you, they are simple RSA keys that you can generate on your machine. using a public service that (hilariously enough) asks for your domain while generating your private key is like asking a hacker to give you a strong password to use. DON'T BE FOOLED
![АЛАУДИНОВ у Скабеевой: эти их ВСУ нас НЕ ДОГОНЯТ 😁 [Пародия]](http://i.ytimg.com/vi/an0anqU4WGQ/mqdefault.jpg)
After all these years, this is still the best video explaining all the steps with detail and clarity. Kudos!
It's been over 3 decades... not much has changed in DNS...
I too had spent two days trying to figure this out, as no one else explained the basics for each field. Wonderful. Thank you.
Same here, nobody (Certainly not Microsoft) put it all in perspective like this video does.
You just solved my biggest problem man. This has been haunting me for a year now, funny i found your video this late. I just cant explain how i feel. Thanks A Lot!!!
Hello man, I want to ask a question to you as this DKIM setup has solved your problem. I am also having an issue on my mail server, mail to yahoo or mail from yahoo cannot be sent as yahoo has blocked our domain. So, I have talked with yahoo and they did not give us the right solution but said to follow the best way to setup SMTP-server. So after research, I found that DKIM with postfix can fix this issue. So, I want to know if you were having the same kind of issue and if after following this tutorial you have solved this issue then I would also like to follow the procedure.
P.S.: If you see this comment, please respond. I am having a major issue with our yahoo clients.
I hope you understand :)
@@sushankunwar8875 chances are Yahoo is also partially relying on third-party data such as Blacklist excetera. Email problems are nasty to deal with especially with some areas being a black hole. For example this past weekend Gmail had some major issues. Let me know your email if you want to talk about it
THANK YOU, I've been trying to figure this out for about 3 hours, and finally found this video and had it solved in about 15 minutes!!
I am glad that i found this video finally. I don't need to watch anymore videos to understand DKIM. You are awesome Thanks a ton.
Fantastic video! Such simple and clear explanations really helped.
Fantastic How-to! Explains in very clear terms. Very valuable! Thank-you !!!!!!!!
Thank you. I've been struggling with this and now I'm finally doing good. Cheers!
The point at the end really does the difference. Thank you so much
This gave me the full understanding i needed to get started. Thank you!
Best video on DKIM setup
Enjoyed the background music. Made it feel much more epic
Thanks for simple and clear explanations
this video tutorial is very informative and helpful. i was looking for how to generate dkim key which solved here and well tested. thanks
Thank you very much that was Crystal clear tutorial
Very simple and clear explanation thanks buddy.
Thanks man, you should also make a video for SPF and DMARC this way :)
Very clear explanation! Thanks a lot.
Clear and simple. Congrats!
first of all, that's not bitrate, rather the LENGHT of the rsa key. Secondly, I think for maximum security one must use a tool running in your own emviroment, as using a hosted RSA keypair generator basicly gives the hoster of that tool to scrape and store your public and private key. Furthermore, adding the dot at the TLD of your domain is nothing new. That's the root. Otherwise it's a good tutorial, just thought you might appreciate my cyber security inputs :) Cheers!
This is extremely helpful until sterp 3 for me. I use Apple and Media Temple, and I have no idea where my mail server is, or how to add the private key in either Apple mail or Media Temple.
I have the same question and the same problem. I use apple and I have no idea what or where my mail server is. I tried to search in google. No answers.... Did you find any solution??
@@fotomundos1 I did a whole bunch of DIY work and research to fix this, which did not work. I could not understand where apple's mail server is. I am just using instead gmail, a lot more, as my personal email is getting worse.
Everything worked 👍
Thanks man, you're awesome. Appreciate you making this.
At @8:37. You have to select "Show Original Message" to see the header of the message.
Thank you, it s accurately detailed so very valuable. Good job!
Thanks for creating an excellent instructional video
Thanks! I'll try to get this working on my Linux box. Most videos on SPF, DKIM and DMARC work their examples on Windows Server + some Windows-only mailer, but no biggie.
very nicely done video, simple and clear explaination. thank you
Omg i been looking for this, amazing help.
Awesome explanation! Thanks so much.
Great guide. Thank you.
just love it how you use a public servic to generate your private key......
most people are too lazy to build their own... I actually did and I just use it for my own private use.
Lazy or not its the dummest thing you can do.
Your private key is suppose to be private, if you use a public service you might as well not bother setting up DKIM in the first place.
Very useful and clear in concept..
Amazing
This is awesome! Thanks a lot! How did you manage to go from teaching me DKIM auth to a movie trailer channel? :D Anyways, thanks a mill!
The best video ever!!!! Thanks man
many thanks for the help
Excuse me! I use my domain webmail instead of hMailServer. How can I set up this on webmail?
Hello, how does the receiving server know which selector to use for DKIM DNS record ?
Hi mate, tanks for the video, do you have a video for same process but for DMARC?
Good explanation. But I tried on my postfix server but it didn't work please help
I can just send a mail from outside of a domain if I am using Azure, without azure, it will not be possible.
how comes?
What's with the spooky background music man.. lol.
On a serious note, nice video
Thank you very much.
thank you very much by 1 video instant subscribe
What mail server? On my machine? On my service provider?
Thank You Sir
I've loved this video until step 3. Interesting enough, I have not been able to find this step slowed down anywhere, I don't even know where to find this screen in my computer at it's blurry on the video... If someone could break this step down, it would be great!
Thanks man!! so helpful
I've added my public key to my DNS records but how do I add the private key to my Outlook software? Doesnt it need to be done server side which would be my web host?
hey, with my domain host. if I add a dns record with DKIM it wants a prefix and value. And if I put the name, in the Prefix. It says "CNAME entry is required"
Awesome! Thank you!
my domain name is on godaddy while my hosting to another vendor with Plesk. on which should I put them?
Whenever I enter the name into the name field Google claims it's invalid. Please help!
Where do I go for the last part if I have an exchange server?
me too
in LINUX! where is the exact location or path to save the private key?
You choose the path from the email server controls...
OK, what if I am using Microsoft 365 Defender and GoDaddy. Do I put both Public and Private keys on the DNS?? In other words, by machine is not my email server, Godaddy is I think.
I have question the last step to test with gmail for pass status, how to get there on google?
Hello my friend. i use hostinger's mail and i can t find anywhere their server to add the Private Key.
Please, can you help me?
Just added TXT value... Should I wait 72 hours until DKIM test is OK?
Thank you!
F-ZERO if i enter the dkim private key only to the c panel instead of the h mailer, will this be okay? Or do I need to enter it to both?
Thanks a lot.
Is sha2 algoritm used in this public key generation
Man I have created my own SMTP provider on Windows Server 2016 about a while ago, then it works very well and I don't have any problem except the delivery status, I got the emails into the JUNK folder. I asked a friend to solve this problem but he told me that I need to set the SPF, RDNS, MX-Records to get a high rate of email delivery, I hope to find me a right solution for this issue :)
Sorry ... you lost me on the 3rd step ... I couldn't figure out how to get it set up using outlook
I host my e-mails at yandex. Can I use the keys I get from any generator on yandex. Do you have any idea?
...and what if the website that you are generating the private key on is actually stealing your key meanwhile?
There is a way to use OPENSSL and it's pathetically simple. However... getting it all setup is a bitch. If you're on Windows the easiest way is to use the GITHub windows installer which comes with a version of OPENSSL. Then just use that one. It's weird... but easier than going through the OPENSSL Source which is only written for LINUX and requires Shady 3rd party installers.
you deleted some of the public key but you hide what's left in the value?
I use Mercury Mail, I see no options to add a DKIM info, it is possible to add it on Mercury Mail?
there are so many different male servers I could never know the mall.
If it's not very intuitive then chances are it's not very well developed so you might consider something else
@@RAZR_Channel hmail is old now and they stopped development, i've used mercury mail for decades so i'm unlikely to change now
@@dchubad sometimes things are done and there is no need to continue... people get bored.. move on...
Thank you, lot of reading trying to understand, finally a visual lesson make me understand. So may I asking a question, I point the NS to cloudflare then the email server is on cloudflare or in strato that is where I get the domain name and configured the user and password before I forward the NS.
I totally lost you after 6:56. Where do I put the private key? What is hMailServer? Whaaat?
Okay. You need access to the server that hosts your email for your domain. If you don't know what I'm talkin about chances are you're using email from a service provider such as Google or Yahoo. hMailServer is just one of many choices of email servers for private use. That is simply the one I chose to demonstrate on there are many others to choose from.
If that does not explain it please post the details of your situation and what you're trying to do
@@RAZR_Channel I have a VPS Linux , How can I install the private key to the server? Is it possible to do this via plesk? thanks!
@@RAZR_Channel what if i know my email server then how to enter private key
If I have Muliple Domains are used , Should I generate DKIM for each Domain ? or use one DKIM for all Domains
I'm not an expert on that factor.. but I would think it would be ok. Not much different than having the same password for multiple places. As long as the key resolves properly per domain.. I would Think it would be ok. But again.. I'm not an expert.
where to add private key, i am sending emails using office outlook 2013
Hi,
your tutorial on DKIM is excellent. i also create DKIM for my domain on hmailserver but all email client showing my dkim is failed.
As error is dkim=neutral (body hash did not verify).
how to resolve this?
And can we give space in v=DKIM1;(space) t=s;(space)k=rsa;(space)p=publickey ??
If you did not try the generator are used in the video try another generator that might give a more clear output of the key. A failure in the HASH implies that it is a problem with the key generation
Is it secure to generarte keys in an online tool?
any idea how or if it is even possible to add the private key to MS IIS 6 SMTP on Windows 2012 Server. I've seen some third party tools, but no mention of it on Microsoft's site that I can see. great video by the way.
No... Historically IIS is : NOT Friendly ( which is why most of us end up using a 3rd party email server ). Like your self I would also like to use the native windows components without involving a 3rd party mess. But over the years I just gave up and use HMail server : Which has been pretty good. Chances are you will arrive at the same conclusion... sorry.
Can you guide me how to enter (setup) private key with goDaddy cpanel? Please note that I don't have access of WHM in goDaddy for my domain, and goDaddy people have no "Authentication" options under email category of cPanel. Any help....?
sorry... don't know anything about godaddy
how to get that html server ??? i don't know about that
Sorry Chumley, but this is NOT working out with NameCheap. Also port25 was taken over by another company
background music is really irritating, otherwise video is good.
I am so lost I’m using O 365 and can’t edit anything without it going straight to go daddy can I hop on a call with you?
if we are using email marketing how should me set this up i could not find any of these things in my email marketing server what should i do
The first thing you need to do is accept that "EMail Marketing : is just another term for SPAM"... and I'm Not going to help you with it.
@@RAZR_Channel come on dude :( thats not fair
@@xtylishjutt9504 Then explain to us the difference?
@@RAZR_Channel we are not spamming peoples 🙄🙄 solving some one's problem do you thing its a spam? Spam is just your gonna bombard weird stuff to people that they dont want.
@@xtylishjutt9504 As I mentioned.... you need to accept that : You are SPAMMING. Your industry is the reason we have to deal with all this technical bullshit just to send an email. TLS,SPF, DKIM, DMARC, RDNS and on and on to fend off SPAMMERS.
ONLINE DKIM GENERATOR IS NOT SAFE TO USE. IT IS ONLY USE FOR EVALUATION
Totally True... I built my own generator so I don't have to use the online ones. But most people won't go that far.
@@RAZR_Channel please explain how can i generator my own .. thank you
I can't believe it took someone a year to point this out. lol. I'll setup a key generator if anyone wants to use it... Give us all your keys :)
@@RAZR_Channel how to set DKIM with our own domains ?
I can not save the name. It says Server name can be use letters hypens and dots only. I tried zoho._domainkey.mydomain.lk. Any suggestions please.
what part are you on... ?
If it's key generation... try another generator online
if it's entering into the DNS or Email server.... you may have to remove any forbidden characters
My issue is it does not allow to save the Host name as zoho._domainkey.domain name
Because it says "Server name can be use letters hypens and dots only"
it does not allow to use the symbol underscore ( _ )
@@prabhath84 Use a different generator that does not result in the underscore ( _ ) zoho._domainkey.mydomain.lk. Any suggestions please.
This is a helpful video, but DO NOT use a service to generate the keys for you, they are simple RSA keys that you can generate on your machine. using a public service that (hilariously enough) asks for your domain while generating your private key is like asking a hacker to give you a strong password to use. DON'T BE FOOLED
Thanks so much.