DKIM record for Odoo

The DNS records

This name and target are the same for every Odoo database; only the domain the record sits under is yours.

Selector odoo

Type: CNAME · Host: odoo._domainkey Copy

odoo._domainkey.odoo.com.

The trailing dot marks a full name. Some DNS hosts want it; others add it or reject it, so follow your host's format.

SPF on the same domain

Type: TXT · Host: @ Copy

v=spf1 include:_spf.odoo.com ~all

Merge include:_spf.odoo.com into an existing SPF record rather than adding a second one.

Set it up and turn on signing

1. Confirm Odoo sends from your own domain through Odoo's mail server. If you configured an outgoing mail server of your own, Odoo says to use that provider's records instead.
2. At your DNS host, create a CNAME with the name odoo._domainkey and the target odoo._domainkey.odoo.com.. For company-name.com, the full name is odoo._domainkey.company-name.com.
3. Add the SPF include _spf.odoo.com on the domain Odoo uses for its Alias Domain.
4. Test the key: Odoo suggests a DKIM lookup with the selector odoo (entered as example.com:odoo in MXToolbox). The checker below does the same with the selector prefilled.
5. Publish a DMARC record. Odoo describes p=none as a way to collect reports without affecting delivery.

DMARC alignment

Odoo is explicit that, for Odoo Online, DKIM on the sending domain is required for DMARC to pass. With the CNAME in place, the signature carries your domain and lines up with the From address. SPF can align too, but only when the Alias Domain, which Odoo uses for bounces, is your domain and its record includes _spf.odoo.com.

Key length and rotation

The CNAME hands the key to Odoo's own odoo._domainkey.odoo.com record, so Odoo can replace it without a DNS edit on your side. Odoo doesn't document a key length or rotation schedule. When we looked it up on 3 November 2026, that record held a 1024-bit RSA key, below the 2048 bits RFC 8301 recommends but within what it allows.

Common mistakes

• Expecting a key you can paste. Odoo uses a CNAME, not a TXT key; there's nothing to copy into Odoo.
• Records on the wrong domain. The CNAME belongs on the domain in your From address; SPF belongs on the Alias Domain.
• Odoo records with your own outgoing server. When Odoo relays through your provider, that provider signs the mail.
• Testing with the wrong selector. Odoo's key is under odoo; a lookup for default or selector1 finds nothing.