Set up DKIM for Amazon SES
The exact steps in the Amazon SES admin console, followed by a checker to confirm the record resolves once you publish it.
Steps
- In the SES console, open Verified identities and select (or create) your domain identity.
- Under Authentication, choose Easy DKIM and a 2048-bit key.
- SES generates three CNAME records with random selector names. Publish all three at your DNS provider exactly as shown.
- SES flips the domain to verified once the CNAMEs resolve, usually within the hour, though propagation can take longer.
- Because the selectors are randomly generated, no checker can guess them. Confirm success by sending a test message and looking for dkim=pass in the Authentication-Results header.
Confirm it workedDKIM checker
DNS changes take time to propagate. Check the record once you have published it.