How to Set Up DKIM for Klaviyo

Step-by-step guide to configure DKIM for Klaviyo email marketing. Learn how to set up a dedicated sending domain and authenticate your e-commerce emails.

Last updated: 2026-01-28

Klaviyo is one of the most popular email marketing platforms for e-commerce businesses. Setting up DKIM ensures your marketing emails, abandoned cart sequences, and transactional emails reach your customers' inboxes instead of spam folders.

Why Set Up DKIM in Klaviyo

Without domain authentication:

  • Emails show "via klaviyomail.com"
  • Deliverability may suffer, especially for promotional emails
  • Your sender reputation depends on Klaviyo's shared IP reputation

With DKIM (dedicated sending domain):

  • Emails appear to come directly from your brand
  • Better inbox placement for marketing campaigns
  • Build your own sender reputation
  • Required for high-volume senders

Klaviyo calls this feature "Dedicated Sending Domain" or "Branded Sending Domain." It includes both DKIM and custom return-path (SPF alignment).

Before You Start

You'll need:

  • A Klaviyo account (available on all paid plans)
  • Access to your domain's DNS settings
  • Admin access to Klaviyo

Step-by-Step Setup

1

Access sending domain settings

In Klaviyo, go to Settings (gear icon) → AccountDomainsSending Domains.

Or navigate to: Settings → Email → Sending Domain.

2

Add a sending domain

Click Add Sending Domain.

Enter the domain you want to send from (e.g., mail.example.com or just example.com).

Using a subdomain like mail.example.com or email.example.com is common practice.

3

View DNS records

Klaviyo displays the DNS records you need to add:

DKIM Records (CNAME):

  • Two CNAME records for DKIM signing
  • Host names include ._domainkey suffix

Return-Path Record (CNAME):

  • For SPF alignment (custom bounce domain)
4

Add records to DNS

Log into your DNS provider and add the CNAME records:

DKIM Record 1:

  • Type: CNAME
  • Host: The first key provided (e.g., kl._domainkey)
  • Value: The target Klaviyo provided

DKIM Record 2:

  • Type: CNAME
  • Host: The second key provided (e.g., kl2._domainkey)
  • Value: The target Klaviyo provided
5

Verify in Klaviyo

Return to Klaviyo and click Verify or Check DNS.

Klaviyo will check for the records and confirm when verified.

Verify Your Setup

After Klaviyo shows verification complete, test the DKIM records publicly.

Test: kl._domainkey.yourdomain.com

Klaviyo DKIM Selectors

Klaviyo typically uses these selectors:

  • kl (primary)
  • kl2 (secondary/backup)

The exact selectors are shown in your Klaviyo dashboard during setup.

Common Issues and Solutions

"Pending" verification status

Cause: DNS hasn't propagated or records are misconfigured.

Solutions:

  • Wait 15-30 minutes (up to 48 hours in rare cases)
  • Verify both CNAME records exist
  • Check that the host field doesn't duplicate your domain
  • Ensure you're using CNAME records, not TXT

CNAME record conflicts

Cause: A record already exists at that hostname.

Solutions:

  • Check for existing records and remove conflicts
  • Ensure no A or AAAA records exist at the same hostname
  • CNAME records cannot coexist with other record types at the same name

Emails still failing DKIM

Cause: Wrong From address or configuration issue.

Solutions:

  • Ensure your From address uses the authenticated domain
  • Check that Klaviyo shows the domain as "Verified"
  • Wait for full propagation before testing

Subdomain strategy

Many e-commerce businesses use a subdomain like mail.example.com or shop.example.com for Klaviyo. This keeps marketing email reputation separate from your main domain.

Dedicated vs Shared Sending

Shared Sending (default):

  • Sends from Klaviyo's domain
  • Lower initial reputation building
  • Emails show "via klaviyomail.com"

Dedicated Sending Domain:

  • Sends from your domain
  • Full control over sender reputation
  • Better branding and deliverability
  • Recommended for all serious e-commerce

E-commerce Deliverability Tips

For Klaviyo users specifically:

  1. Warm up your domain: Start with engaged subscribers, gradually increase volume
  2. Segment by engagement: Send to active subscribers first
  3. Monitor metrics: Watch open rates, click rates, and bounce rates in Klaviyo
  4. Clean your list: Remove unengaged subscribers regularly
  5. Authenticate everything: Set up DKIM, SPF, and DMARC

Complete Your Email Authentication

Klaviyo's dedicated sending domain handles DKIM. Also configure:

SPF: Klaviyo's CNAME setup includes SPF alignment through the return-path record. If you need to add Klaviyo to an existing SPF record:

include:_spf.klaviyo.com

Check at spfrecordcheck.com.

DMARC: Set up a DMARC policy. Check at dmarcrecordchecker.com.

Monitor Your DKIM Records

Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.

Never miss a DKIM issue

Monitor your SPF, DKIM, DMARC and MX records daily. Get alerts when something breaks.

Start Monitoring