How to Set Up DKIM for Klaviyo
Step-by-step guide to configure DKIM for Klaviyo email marketing. Learn how to set up a dedicated sending domain and authenticate your e-commerce emails.
Last updated: 2026-01-28
Klaviyo is one of the most popular email marketing platforms for e-commerce businesses. Setting up DKIM ensures your marketing emails, abandoned cart sequences, and transactional emails reach your customers' inboxes instead of spam folders.
Why Set Up DKIM in Klaviyo
Without domain authentication:
- Emails show "via klaviyomail.com"
- Deliverability may suffer, especially for promotional emails
- Your sender reputation depends on Klaviyo's shared IP reputation
With DKIM (dedicated sending domain):
- Emails appear to come directly from your brand
- Better inbox placement for marketing campaigns
- Build your own sender reputation
- Required for high-volume senders
Klaviyo calls this feature "Dedicated Sending Domain" or "Branded Sending Domain." It includes both DKIM and custom return-path (SPF alignment).
Before You Start
You'll need:
- A Klaviyo account (available on all paid plans)
- Access to your domain's DNS settings
- Admin access to Klaviyo
Step-by-Step Setup
Access sending domain settings
In Klaviyo, go to Settings (gear icon) → Account → Domains → Sending Domains.
Or navigate to: Settings → Email → Sending Domain.
Add a sending domain
Click Add Sending Domain.
Enter the domain you want to send from (e.g., mail.example.com or just example.com).
Using a subdomain like mail.example.com or email.example.com is common practice.
View DNS records
Klaviyo displays the DNS records you need to add:
DKIM Records (CNAME):
- Two CNAME records for DKIM signing
- Host names include
._domainkeysuffix
Return-Path Record (CNAME):
- For SPF alignment (custom bounce domain)
Add records to DNS
Log into your DNS provider and add the CNAME records:
DKIM Record 1:
- Type: CNAME
- Host: The first key provided (e.g.,
kl._domainkey) - Value: The target Klaviyo provided
DKIM Record 2:
- Type: CNAME
- Host: The second key provided (e.g.,
kl2._domainkey) - Value: The target Klaviyo provided
Verify in Klaviyo
Return to Klaviyo and click Verify or Check DNS.
Klaviyo will check for the records and confirm when verified.
Verify Your Setup
After Klaviyo shows verification complete, test the DKIM records publicly.
Test: kl._domainkey.yourdomain.com
Klaviyo DKIM Selectors
Klaviyo typically uses these selectors:
kl(primary)kl2(secondary/backup)
The exact selectors are shown in your Klaviyo dashboard during setup.
Common Issues and Solutions
"Pending" verification status
Cause: DNS hasn't propagated or records are misconfigured.
Solutions:
- Wait 15-30 minutes (up to 48 hours in rare cases)
- Verify both CNAME records exist
- Check that the host field doesn't duplicate your domain
- Ensure you're using CNAME records, not TXT
CNAME record conflicts
Cause: A record already exists at that hostname.
Solutions:
- Check for existing records and remove conflicts
- Ensure no A or AAAA records exist at the same hostname
- CNAME records cannot coexist with other record types at the same name
Emails still failing DKIM
Cause: Wrong From address or configuration issue.
Solutions:
- Ensure your From address uses the authenticated domain
- Check that Klaviyo shows the domain as "Verified"
- Wait for full propagation before testing
Subdomain strategy
Many e-commerce businesses use a subdomain like mail.example.com or shop.example.com for Klaviyo. This keeps marketing email reputation separate from your main domain.
Dedicated vs Shared Sending
Shared Sending (default):
- Sends from Klaviyo's domain
- Lower initial reputation building
- Emails show "via klaviyomail.com"
Dedicated Sending Domain:
- Sends from your domain
- Full control over sender reputation
- Better branding and deliverability
- Recommended for all serious e-commerce
E-commerce Deliverability Tips
For Klaviyo users specifically:
- Warm up your domain: Start with engaged subscribers, gradually increase volume
- Segment by engagement: Send to active subscribers first
- Monitor metrics: Watch open rates, click rates, and bounce rates in Klaviyo
- Clean your list: Remove unengaged subscribers regularly
- Authenticate everything: Set up DKIM, SPF, and DMARC
Complete Your Email Authentication
Klaviyo's dedicated sending domain handles DKIM. Also configure:
SPF: Klaviyo's CNAME setup includes SPF alignment through the return-path record. If you need to add Klaviyo to an existing SPF record:
include:_spf.klaviyo.com
Check at spfrecordcheck.com.
DMARC: Set up a DMARC policy. Check at dmarcrecordchecker.com.
Related Articles
Monitor Your DKIM Records
Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.
Never miss a DKIM issue
Monitor your SPF, DKIM, DMARC and MX records daily. Get alerts when something breaks.
Start Monitoring