Authenticating Your Custom Domain with DKIM and DMARC

DecoNetwork includes an option in Order-Reply Email settings that allows you to publish DKIM (DomainKeys Identified Mail) and DMARC (Domain-based Message Authentication, Reporting & Conformance) records for your custom sender domain. These records help email providers confirm that your order emails truly come from your business. When this authentication is in place, your emails are more likely to reach the inbox instead of being filtered as spam.

In this article

• Prerequisites
• Why this matters
• Simple explanation: How email authentication works
• How to enable DKIM and DMARC publishing
• What this setting does
• Best practices
• Troubleshooting
• FAQs
• Additional resources

Prerequisites

Why this matters

Email services like Gmail, Outlook, and Yahoo check whether order emails are really sent by your business. If they cannot verify this, messages may be delivered to spam or blocked entirely. Enabling DKIM and DMARC publishing helps:

• Improve the chances your order emails reach customer inboxes
• Protect your domain from being used for fraudulent emails
• Increase trust with major email providers
• Keep your domain’s email reputation healthy

Simple explanation: How email authentication works

Email providers perform a quick “identity check” on every message you send. DecoNetwork supports two important checks that work together:

1. DKIM – Adds a digital signature to your email

DKIM is like sealing an envelope with a unique stamp that proves the message really came from your business. Email services use this signature to confirm the email wasn’t changed and was sent by an approved system.

2. DMARC – Makes sure everything matches

DMARC checks whether the information in the email matches your business’s domain. If the domains don’t match, many email providers treat the message as untrustworthy, even if the email itself is legitimate.

Publishing DKIM and DMARC on your custom domain ensures these checks line up correctly, which helps avoid DMARC failure reports and improves deliverability.

How to enable DKIM and DMARC publishing

1. Go to Admin → Settings → Email & Messaging → Order-Reply Email.

2. Scroll to the DKIM Settings section.

   

   Order-Reply Email settings location

3. Tick the checkbox, “Publish DKIM on my custom domain”.

   

   DKIM publishing option

4. Review the DKIM Details panel that appears.
   When the checkbox is selected, a panel labelled DKIM Details becomes visible. This panel displays the TXT record that needs to be added to your domain’s DNS settings.

   

   DKIM Details panel displayed after enabling DKIM publishing

5. Copy the TXT record shown in the panel and add it to your domain’s DNS. Your domain host’s documentation will explain how to add a TXT record.
6. Save your changes.

What this setting does

When enabled, this setting:

• Publishes DKIM information under your domain so your emails can be properly signed
• Publishes a DMARC policy that matches your domain
• Ensures DKIM and DMARC alignment so email providers trust the message
• Reduces the chance of messages being flagged as spam

Best practices

• Use an email address that matches your custom domain (e.g., orders@yourdomain.com).
• Keep custom interceptors simple – avoid overriding DKIM domains.
• Allow time for DNS updates to propagate (usually a few hours).
• Ask your domain host to confirm DNS changes if you are unsure.

Troubleshooting

Emails still land in spam

• Check that you are using an email address that matches your domain.
• Verify that no custom development is overriding DKIM settings.
• Allow 24 hours for DNS propagation if you recently made changes.

I received a DMARC failure report

• This usually means the email domain and DKIM domain didn’t match.
• Ensure the feature is enabled so DecoNetwork signs emails using your domain.

FAQs

Will the appearance of my emails change?

No. These settings only affect how email servers verify your messages.

Can I use my own DKIM or DMARC records instead?

Yes. DecoNetwork will not overwrite existing DNS records without your approval.

Does this setting apply to all outbound emails?

This configuration applies specifically to Order-Reply Emails.

Additional resources

• Order-Reply Email