# DKIM record for Rackspace Email URL: https://iblockspam.com/dkim/rackspace-email Last updated: 2026-11-03 Record type: TXT Selectors: shown in the Cloud Office Control Panel Key managed by: Provider (you publish its key) Rackspace Email turns on DKIM per domain in the Cloud Office Control Panel, under Domains, Sender Authentication (DKIM). If Rackspace hosts your DNS, the record is added for you. If it doesn't, the panel shows a key name and a value that you publish as a TXT record, then you click Verify TXT Record. New outgoing mail is then signed. ## DNS records - DKIM key from the Cloud Office Control Panel (TXT, host ._domainkey): `` Many DNS hosts add your domain to the name for you. Enter only the part Rackspace shows before your domain. - DMARC policy (after SPF and DKIM) (TXT, host _dmarc): `v=DMARC1; p=none; rua=mailto:` Rackspace recommends SPF, then DKIM, then DMARC. Start at `p=none` and tighten once reports look clean. ## Set it up and turn on signing - Sign in to the Cloud Office Control Panel at `cp.rackspace.com` as an administrator. - On the home page, in the **Domains** section, click **Sender Authentication (DKIM)**, then click the domain you want to sign. - Click **Enable DKIM for** the domain. With DNS managed in the Cloud Office Control Panel, Rackspace finishes the setup itself and you can skip the next step. - With DNS hosted elsewhere, create a TXT record at that DNS host using the key name and value the page shows. - Back in the panel, click **Verify TXT Record**. If the check fails, the message says what to correct. Rackspace allows about 15 minutes for the record and 24 to 48 hours for propagation. ## DMARC alignment Once enabled, Rackspace signs every new outgoing message from the domain with that domain's key, so the signature's `d=` matches the address people see in From and DMARC can pass on DKIM. That matters most for forwarded mail, where the SPF result from `include:emailsrvr.com` no longer holds. Messages sent before you enabled it stay unsigned. ## Key length and rotation The key pair is generated by Rackspace, and the public half sits in your zone as a TXT value, so a replacement key would mean publishing a new record. Rackspace's Cloud Office articles don't state a key length or a rotation schedule. Its Cloud DNS guidance adds that no two services should share a selector, so keep other senders' keys under their own names. ## Common mistakes - **Clicking Verify TXT Record seconds after saving.** Give DNS time; Rackspace quotes 24 to 48 hours for propagation. - **A doubled name.** `._domainkey.example.com.example.com` happens when the host appends the domain to a full name you pasted. - **Enabling only the main domain.** Each domain you send from has its own entry on the Sender Authentication (DKIM) page. - **Reusing the Rackspace selector for another service.** Another sender's key under the same name replaces Rackspace's and breaks its signatures. **Q: Where do I turn on DKIM in the Rackspace Cloud Office Control Panel?** On the home page, open Domains, then Sender Authentication (DKIM), click your domain and choose Enable DKIM for it. If Rackspace manages your DNS, that's the whole job; otherwise publish the TXT record shown and click Verify TXT Record. **Q: Why doesn't Rackspace Email show me a DKIM record to add?** Probably because your domain's DNS is managed in the Cloud Office Control Panel. Rackspace says DKIM is then enabled automatically, so there's nothing to copy to another DNS host. **Q: Are emails sent before I enabled Rackspace DKIM signed later?** No. Rackspace says new outgoing mail is signed once DKIM is enabled. Messages already sent keep the headers they left with. Sources: - Rackspace Docs: Enable DKIM in the Cloud Office Control Panel: https://docs.rackspace.com/docs/enable-dkim-in-the-cloud-office-control-panel - Rackspace Docs: Create a DKIM TXT record: https://docs.rackspace.com/docs/create-a-dkim-txt-record --- Source: iBlockSpam, https://iblockspam.com/dkim/rackspace-email (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt