Sending & Deliverability
Docs chevron_right Sending & Deliverability chevron_right Sending domains & DKIM

Sending domains & DKIM

Authenticating your sending domain is the most important thing you'll do for deliverability. You add a few DNS records to prove you own your domain; the provider you connected then sends and DKIM-signs mail as you.

Why authentication matters

Mailbox providers (Gmail, Outlook, and the rest) trust mail far more when the sender proves they own the domain it comes from. Authentication is what separates legitimate senders from spoofers. Without it, even great email risks landing in spam; with it, your inbox placement improves immediately.

What DKIM does

DKIM (DomainKeys Identified Mail) attaches a cryptographic signature to every message. The receiving server checks that signature against a public key published in your domain's DNS to confirm the message is genuinely from you and wasn't tampered with in transit. EmailFlow AI generates the key and signs each message for you — you simply publish the record.

How to authenticate

  1. Add your sending domain in your account settings.
  2. EmailFlow AI generates the DNS records to add, including your DKIM record.
  3. Copy them into your domain's DNS (at your registrar or DNS host).
  4. Return and verify — once the records resolve, your domain is authenticated.
dns
Connect your own sending provider (Amazon SES recommended) and authenticate your domain — those are the two setup steps, and then sending is unlimited.

After authentication

With your domain authenticated, set up a verified sender so your From address is trusted, and consider a tracking domain so open and click links use your own domain. Together these complete a professional, inbox-friendly sending setup.

Frequently asked questions

Why do I need to authenticate a domain? Authentication (via DNS records like DKIM) proves you're authorized to send from your domain. It's what lets your provider send as you — and it's what keeps your mail out of spam.

How long does it take? Adding the DNS records takes a few minutes; providers may need a little time to publish them. Once they're detected, your domain is ready and you can create verified senders on it.

Can I use a subdomain? Yes — many senders use a dedicated subdomain (for example, mail.yourdomain.com) to keep marketing reputation separate from their primary domain.