Errors
DKIM Status None — Your Emails Aren't Being Signed
DKIM “none” means no signature at all — not a bad signature. Turn on signing and publish the TXT. Usually easier than “fail.”
none vs fail vs pass
none — no signature. fail — signature didn’t verify. pass — good. none is fixable — flip signing on and publish DNS.
Common causes
- DKIM not enabled in the provider
- New ESP without domain authentication
- Subdomain sending with no DKIM row
- Wrong selector — DNS doesn’t match what signs
Fix it step by step
Step 1 Run DNS Preflight → does the DKIM card show none or no record?
Step 2 Identify your sending provider (alignment engine)
Step 3 Enable DKIM signing in your provider dashboard
Step 4 Publish the DKIM TXT record to your DNS
Step 5 Wait up to 48 hours → re-run DNS Preflight → confirm DKIM pass
Step 6 Send a test email and confirm DKIM-Signature appears in headers
Run DNS Preflight to confirm DKIM DNS
Open DNS Preflight →FAQ
What does DKIM none mean?
No DKIM signature on the message — nothing to verify at the receiver.
Is none worse than fail?
Both hurt DMARC. None means signing wasn’t on. Fail means DNS didn’t match. None is often easier to fix.
How do I enable DKIM signing?
Use your provider’s domain authentication or sender authentication flow — pick the fix guide for your ESP.
Provider says enabled but Preflight shows none — why?
You still need the TXT in DNS — dashboard + DNS are two steps.
Does DKIM none hurt inbox placement?
Yes — big inboxes use DKIM as a trust signal. No DKIM plus weak DMARC raises spam risk.