{"id":14262,"date":"2023-07-19T12:20:49","date_gmt":"2023-07-19T10:20:49","guid":{"rendered":"https:\/\/aivie.ch\/faq\/how-do-i-verify-my-email-domain-with-a-dkim-cname-record\/"},"modified":"2026-01-11T14:59:42","modified_gmt":"2026-01-11T12:59:42","slug":"how-do-i-verify-my-email-domain-with-a-dkim-cname-record","status":"publish","type":"faq","link":"https:\/\/aivie.ch\/en\/faq\/how-do-i-verify-my-email-domain-with-a-dkim-cname-record\/","title":{"rendered":"How do I verify my email domain with a DKIM CNAME record?"},"content":{"rendered":"\n

Three DNS CNAME records authorize the email domain to send. From this moment on, you can send e-mails to any sender under your domain, and you risk less to end up in SPAM.<\/p>\n\n

This feature is only available to our Aivie Pro<\/a> customers.<\/p>\n\n\n\n

What is a DNS CNAME record? <\/h2>\n\n

CNAME entries are nothing more than a shortcut or nickname. <\/p>\n\n

A DNS CNAME record is like a nickname for an Internet address. Imagine you have a long name like “deineid.ch.app.aivie.ch”, but you want people to call you “cool-page.ch”. A CNAME record allows you to make this nickname connection.<\/p>\n\n

When someone types “cool-page.ch”, the CNAME record automatically forwards the request to “yourid.ch.app.aivie.ch”. So it’s a handy way to give your website a simpler and easier to remember name without having to change the actual address. The user does not notice this redirection.<\/p>\n\n

What is a DNS CNAME DKIM record?<\/h2>\n\n

DKIM stands for “DomainKeys Identified Mail” and is a technology that is used to make e-mails more secure and to protect them from forged senders.<\/p>\n\n

Imagine you want to make sure the emails you send are really coming from you and not someone else pretending to be you. This is where the DKIM entry comes into play.<\/p>\n\n

When you set up DKIM on your email server, it creates a special digital “signature” code for each outgoing email. This code is unique to your domain and will be added to the header of the email.<\/p>\n\n

Now, when the email arrives at the recipient’s end, their email server can check the DKIM entry in the email. It compares the signature with the information stored in your DKIM public key on your DNS server.<\/p>\n\n

If the signature is valid and matches the public key, the recipient knows that the email actually came from your server and has not been tampered with.<\/p>\n\n

DKIM thus helps to ensure that your emails are trusted and less likely to be considered spam or phishing, as their authenticity is confirmed by the digital signature.<\/p>\n\n

Why do I need to set up DKIM entries?<\/h2>\n\n

Setting up DKIM is necessary to allow Aivie to send emails through your domain and to make sure that your emails are less likely to end up in the recipient’s spam folder.<\/p>\n\n

In our blog, you can find out what you can do to prevent your emails from ending up in the spam folder<\/a>.<\/p>\n\n

How do I set up CNAME DKIM entries?<\/h2>\n\n

The actual setup varies greatly depending on the DNS provider (e.g. Namecheap, Cyon, Hostpoint, GoDaddy). The following is a general sequence of tasks:<\/p>\n\n

    \n
  1. Run the Aivie Setup Wizard and make a note of your CNAME DKIM entries.<\/li>\n\n\n\n
  2. Log in to your DNS provider<\/li>\n\n\n\n
  3. Choose your email domain<\/li>\n\n\n\n
  4. Click on Add CNAME<\/li>\n\n\n\n
  5. Leave in the field “TTL” the default value<\/li>\n\n\n\n
  6. In the Name field, specify the value received from Aivie.<\/li>\n\n\n\n
  7. In the “Value”, “Value” or “Points to” field, specify the URL received from Aivie<\/li>\n\n\n\n
  8. Click AddNote that it can take up to 24 hours for the entry to become active.<\/li>\n<\/ol>\n\n

    Depending on your host, you may have to specify your top-level domain (e.g. your-domain.ch),or it may already be “pre-filled.”<\/p>\n\n

    For certain hosters, “DKIM” is also a separate DNS record type. Then you should select this instead of CNAME.<\/p>\n\n

    An example of CNAME-DKIM entries<\/h3>\n\n

    It always takes three entries for the entry to be valid. Thereby the contributions differ only with the cryptic key. Within an entry the cryptic key is identical at the “name” and at the “value”.<\/p>\n\n

    Type<\/th>Name (Host)<\/th>TTL<\/th>Value (Value)<\/th><\/tr><\/thead>
    CNAME<\/td>abcvclgf3ydj123dmw2zsypgqkujabc._domainkey.your-domain.ch<\/td>4 h<\/td>abcvclgf3ydj123dmw2zsypgqkujabc.dkim.amazonses.com<\/td><\/tr>
    CNAME<\/td>defvclgf3ydj123dmw2zsypgqkujabc._domainkey.your-domain.ch<\/td>4 h<\/td>defvclgf3ydj123dmw2zsypgqkujabc.dkim.amazonses.com<\/td><\/tr>
    CNAME<\/td>ghjvclgf3ydj123dmw2zsypgqkujabc._domainkey.your-domain.ch<\/td>4 h<\/td>ghjvclgf3ydj123dmw2zsypgqkujabc.dkim.amazonses.com<\/td><\/tr><\/tbody><\/table><\/figure>\n\n

    Example of a CNAME entry at Hosttech<\/h3>\n\n
    \"record<\/figure>\n\n

    Example for a CNAME entry at Namecheap<\/h3>\n\n
    \"namecheap\"<\/figure>\n\n