DKIM record for Hostinger Email

The DNS records

The targets are the same for every domain; only the host changes when you sign mail for a subdomain. Hostinger's DKIM article lists the records with a TTL of 300 seconds.

Selector hostingermail-a

Type: CNAME · Host: hostingermail-a._domainkey Copy

hostingermail-a.dkim.mail.hostinger.com

Selector hostingermail-b

Type: CNAME · Host: hostingermail-b._domainkey Copy

hostingermail-b.dkim.mail.hostinger.com

Selector hostingermail-c

Type: CNAME · Host: hostingermail-c._domainkey Copy

hostingermail-c.dkim.mail.hostinger.com

For a subdomain such as shop.example.com, Hostinger uses hosts like hostingermail-a._domainkey.shop with the same targets.

Set it up and turn on signing

1. In hPanel, open Emails, click Mailboxes next to the account and choose Domain settings to see the DKIM records Hostinger expects.
2. If the domain's nameservers point to Hostinger, click Connect automatically and you're done.
3. If they point elsewhere, delete any existing DKIM records for Hostinger at that DNS host first, then add the three CNAMEs above.
4. Enter only hostingermail-a._domainkey in the host field, without trailing dots, spaces or capital letters, at hosts that append your domain.
5. Return to Domain settings to check the status. Hostinger says new records can take a few hours, and up to 24 hours, to work.

DMARC alignment

All three selectors are published under your own domain's _domainkey name, so once they resolve, a receiver verifies Hostinger's signature against a key tied to your domain, which is what DMARC needs for an aligned DKIM pass. Hostinger's records cover mail sent through Hostinger Email only: for a newsletter tool or website plugin that sends through another service, Hostinger says to use that sender's own DKIM record instead of the defaults.

Key length and rotation

With three CNAMEs pointing into dkim.mail.hostinger.com, the keys themselves live in Hostinger's zone, so Hostinger can replace a key there without asking you to touch your DNS. Its help articles don't state a key length or a rotation schedule, and they don't say which of the three selectors signs at a given time, so publish all of them.

Common mistakes

• Entering the records as TXT. Hostinger says its DKIM records must be CNAMEs; a TXT record or a typo can break signing.
• A doubled domain. Some DNS providers append your domain to the host, turning hostingermail-a._domainkey into hostingermail-a._domainkey.example.com.example.com.
• Leftover DKIM records. Hostinger asks you to delete existing DKIM records before adding the defaults at an outside DNS host.
• Adding records at the wrong provider. They only count where the domain's nameservers point; otherwise hPanel keeps showing the domain as not connected.