KnowBe4 DKIM Setup 

KnowBe4 DKIM Requirements

By default, all KnowBe4 training emails contain a DKIM signature, but phishing emails require the account owner to enable this feature first. See below for steps on how to enable DKIM signatures for phishing emails.

1. 1. Log in to your KnowBe4 account.
   2. Click on your email in the top-right corner and click Account Settings.
   3. Under the Phishing Settings section, select the Enable DKIM Signature check box.
   4. Click Save Changes at the bottom of your Account Settings page.

After enabling DKIM signatures, your organization can adjust the signing domain for your organization’s needs. To use your own signing domain for phishing emails, follow the steps below:

1. 1. Log in to your KnowBe4 account.
   2. Click your email in the top-right corner of the page and select Account Settings.
   3. Under the Phishing Settings section, select the Enable DKIM signature check box if you haven’t enabled DKIM signatures already.
   4. Click Use Your Own Signing Domain.
   5. Choose the domain you want to use. To add a domain to this drop-down menu, you will first need to add an allowed domain in your KnowBe4 account.
   6. Click Create a DKIM Selector for This Domain.
   7. Copy the host name and values provided in the fields of the pop-up window.
   8. Navigate to your DNS provider and add a TXT record containing the copied information. If you’re using Sendmarc for DKIM managment, you can add the keys directly to the platform by completing this process.

      Note: To verify that your DNS provider has recognized the TXT record, click the Validate the DNS TXT record for this DKIM selector button.

   9. Click Save Changes at the bottom of your Account Settings page.
   10. Once you’ve created the TXT record in your DNS provider or added them to Sendmarc, click OK in the DKIM Selectors Details window in your KSAT console.
       

       Using Custom DKIM Signatures in KnowBe4 Training Emails

       You can also use custom DKIM signatures for your training emails. To use your own signing domain in training emails, follow the steps below:

       1. Log in to your KnowBe4 account.
       2. Click your email in the top-right corner of the page and select Account Settings.
       3. Under the Training Settings section, select the Enable Custom DKIM Signature check box if you haven’t enabled DKIM signatures already.
       4. Click Create a DKIM Selector for This Domain.
       5. Copy the host name and values provided in the fields of the pop-up window
       6. Copy the host name and values provided in the fields of the pop-up window.
       7. Navigate to your DNS provider and add a TXT record containing the copied information. If you’re using Sendmarc for DKIM managment, you can add the keys directly to the platform by completing this process.
       8. Once you’ve created the TXT record in your DNS provider, click OK in the DKIM Selectors Details window in your KSAT console.
       9. Click Save Changes at the bottom of your Account Settings page.
       10. For further assistance with this feature, please contact our support team and they will be happy to help.