Enabling and Customizing DKIM Signatures in KnowBe4 Emails

KnowBe4’s training emails contain a line of text called a DomainKeys Identified Mail (DKIM) signature that proves it is an authentic KnowBe4 email. We also have the option to enable this feature for phishing emails, if you would like. This guide will show you how to enable DKIM signatures for phishing emails from KnowBe4 and how to use an allowed domain as a custom DKIM signature for both training and phishing emails.

Jump to:
Enabling DKIM Signatures in Phishing Emails
Using Custom DKIM Signatures in KnowBe4 Phishing Emails
Using Custom DKIM Signatures in KnowBe4 Training Emails

Enabling DKIM Signatures for Phishing Emails

By default, all KnowBe4 training emails contain a DKIM signature but phishing emails require the account owner to enable this feature first. See below for steps on how to enable DKIM signatures for phishing emails.

1. Log in to your KnowBe4 account.
2. Click on your email in the upper-right corner and click Account Settings.
3. Under the Phishing Settings section, click the checkbox labeled Enable DKIM signature.

4. Click Save Changes.

All KnowBe4 phishing emails will now contain KnowBe4’s signing domain and can be used to verify if a phishing email is from KnowBe4 or a real phishing attack. See the section below for information on how to customize the signing domain for phishing and training emails.

Back to Top

Using Custom DKIM Signatures in KnowBe4 Phishing Emails

After enabling DKIM signatures, your organization can adjust the signing domain for your organization’s needs. See the instructions below to use your own signing domain for phishing emails.

1. Log in to your KnowBe4 account.
2. Click on your email in the top-right corner and click Account Settings.
3. Under the Phishing Settings section, click the checkbox labeled Enable DKIM signature if you haven’t enabled DKIM signatures already.
4. Click the button labeled Use your own signing domain.

5. Choose the domain you wish to use. To add a domain to this drop-down, you will first need to add the domain as an Allowed Domain in your KnowBe4 account. See our How to Add and Verify Allowed Domains article for more information.

6. Click Create a DKIM selector for this domain.

7. Copy the host name and values provided in the pop-up.

8. Navigate to your DNS provider and add a TXT record containing the copied information.

9. Once you’ve created the TXT record in your DNS provider, click OK in the DKIM Selectors Details window in your KMSAT console.
10. Click Save Changes at the bottom of your Account Settings.

Back to Top

Using Custom DKIM Signatures in KnowBe4 Training Emails

You can also use custom DKIM signatures for your training emails. See the instructions below to use your own signing domain in training emails.

1. Log in to your KnowBe4 account.
2. Click on your email in the upper-right corner and click Account Settings.
3. Under the Training Settings section, click the checkbox labeled Enable Custom DKIM Signature if you haven’t enabled DKIM signatures already.

4. Choose the domain you wish to use. To add a domain to this drop-down, you will first need to add the domain as an Allowed Domain in your KnowBe4 account. See our How to Add and Verify Allowed Domains article for more information.

5. Click Create a DKIM selector for this domain.

6. Copy the host name and values provided in the pop-up.

7. Navigate to your DNS provider and add a TXT record containing the copied information.

8. Once you’ve created the TXT record in your DNS provider, click OK in the DKIM Selectors Details window in your KMSAT console.
9. Click Save Changes at the bottom of your Account Settings.

For further assistance with this feature, please contact our support team and they will be happy to help.

Back to Top