How to set up DKIM on Cloudflare

Step by step DKIM setup for Cloudflare: complete instructions, examples, verification commands, and common pitfalls.

Want to check your domain while following this guide?

Run a free SPF, DKIM and DMARC check on your domain to see exactly what is passing and what needs fixing.

No signup required. Works on any domain.

search Run a Free Domain Check notifications_active Monitor my domain

This is a reference guide for configuring DKIM on Cloudflare. Use it while editing DNS or when troubleshooting deliverability.

Tip: Avoid common mistakes: follow these steps to add DKIM on Cloudflare. Then verify everything with the InboxGreen Free Checker.

Provider-specific notes for Cloudflare

  • Cloudflare DNS caches aggressively. A record that looks correct in the UI can take a few minutes to resolve externally. Always verify with dig or a checker after saving.
  • TXT records are never proxied (orange cloud does not apply), but people still get confused. Make sure your SPF and DMARC records have a grey cloud icon.
  • Cloudflare Dashboard → DNS → Records.

What you’ll need

  • Access to Cloudflare to generate a DKIM key and selector.
  • DNS provider access to publish a TXT record at selector._domainkey.

Generate your DKIM key

In Cloudflare, generate a DKIM key and note the selector. Providers often suggest something like selector1.

Cloudflare Dashboard → DNS → Records.

Publish the record

  1. Create a TXT record at host selector._domainkey (replace selector with your actual selector name).
  2. Paste the full value starting with v=DKIM1; k=rsa; p= and save.
  3. Wait for DNS propagation.

Verify DKIM

  • Send a test email to a Gmail address and use “Show original” to confirm “DKIM: PASS”.
  • Or run: 
    dig TXT selector._domainkey.yourdomain.com +short

Common mistakes

  • Using the wrong host so the record becomes selector._domainkey.yourdomain.com.yourdomain.com.
  • Breaking the value by wrapping or truncating the TXT string.
  • Publishing a record for the wrong selector and then validating on another.

Related for Cloudflare

quick_reference_all Set up SPF on Cloudflare quick_reference_all Set up DMARC on Cloudflare quick_reference_all Set up List-Unsubscribe on Cloudflare
Pro tip: Turn on InboxGreen Monitoring to check these records daily and get alerts if something breaks.

Free Deliverability Scan

Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.

Useful tools

tune SPF Generator tune DMARC Generator verified Badges