How to set up DKIM on Wix

Publish your email provider's DKIM key in your Wix DNS so your emails carry a tamper-proof signature.

Why this matters to your business

DKIM (DomainKeys Identified Mail) adds an invisible digital signature to every email you send. The receiving mail provider uses a public key you’ve published in your DNS to confirm two things: the message really came from your domain, and nobody altered it on the way.

In plain terms: DKIM is a seal of authenticity on your email. It makes impersonation harder and improves the chance your genuine mail reaches the inbox rather than spam. It’s free and it’s a one-time setup.

Important: DKIM is generated by your email provider, not Wix

This is the record people most often get tangled on, because two different companies can be involved:

Your email provider generates the key. Wix is a website builder and DNS host — its website servers do not produce your DKIM keys. The DKIM record comes from whoever runs your mailboxes. If you use Wix business email, that’s Google Workspace (Wix’s business email is powered by Google), so the key is generated in the Google admin area. If you use Microsoft 365 or another mail host, the key comes from there. You cannot make this value up.
Wix publishes it. You then add that key to your domain’s DNS in Wix — if Wix is where your domain’s nameservers point.

So: generate the key in your email provider’s admin console, then publish it in Wix DNS. With some providers there’s also a final step where you go back and switch DKIM on — follow your provider’s instructions for that.

Step 1 — Get the key from your email provider

Sign in to your email provider’s admin console (not the Wix site editor). For Wix business email that is the Google admin console.
Find its email-authentication or DKIM section and generate a DKIM record for your domain.
Your provider will give you two things:
- A host name / selector — a short prefix ending in ._domainkey (for example google._domainkey, or a provider-specific selector like selector1._domainkey).
- A long TXT record value, usually beginning v=DKIM1; k=rsa; p= followed by a very long string of characters (the public key).
Keep this page open so you can copy both pieces accurately.

Step 2 — Confirm Wix runs your DNS

A DKIM record only works if it’s added wherever your domain’s nameservers point. If you bought the domain through Wix, or connected an outside domain using the “point to Wix via nameservers” method, you’re in the right place. If your nameservers point to another company, add the DKIM record there instead. In your Wix account, open the domain and check its DNS settings (look for DNS / Records / Advanced) if you’re unsure.

Step 3 — Publish the key in Wix

Sign in to Wix and open your account’s Domains area.
Click the domain, then open its DNS settings (look for DNS / Records / Advanced).
Go to the TXT records section and choose to add a new TXT record.
In the Host Name field (sometimes labelled Name), enter only the selector part your provider gave you — for example google._domainkey or selector1._domainkey. Do not add your domain name on the end; Wix appends it automatically.
In the Value / Text field, paste the long key value exactly as your provider gave it.
Save the record.

Quirks people get wrong

Two places, two companies. Generate in your email provider, publish in Wix. Some providers also need you to go back and click something like “Start authentication” after the record is live — don’t skip that, or the key is published but your mail is never signed.
Don’t put the full domain in Host Name. If your provider shows google._domainkey.yourdomain.com, you enter only google._domainkey in Wix — the rest is added for you. Including the domain again creates a broken host like google._domainkey.yourdomain.com.yourdomain.com.
Paste the whole key — it’s long. DKIM public keys are hundreds of characters. Make sure nothing is cut off and no stray spaces or line breaks crept in when you copied it.
Don’t add your own quotes. Paste the plain value; Wix handles the quoting. Manually adding " marks on top can corrupt the record.
Match the selector exactly. The host in Wix must match what your provider expects, character for character — that’s how the receiver finds the right key.
Give it time. DNS changes can take minutes up to a couple of hours before your provider can confirm the record and DKIM starts validating.

Verify it worked

After publishing the record (and turning authentication on at your provider, if it requires that), allow a little propagation time, then run the free check on Defaults.Exposed. It will confirm in plain language whether your DKIM record is published and readable. Your data is processed in the EU.

Done? Check your domain free to confirm it worked — and see your full grade across all 34 checks.