Mail errors · SPF, DKIM and DMARC results

What does “<dkim>fail</dkim>” mean?

In your DMARC report, that row of messages failed DKIM for your domain.

Last read from the sources at the foot of this page.

Check my firm Read the steps
Result
DKIM check

<dkim>fail</dkim>

As the standard prints it.
01

What does it mean?

Each record in a DMARC report counts messages from one IP address and shows the SPF, DKIM and DMARC results for them.

02

What exactly does the source say?

<disposition>none</disposition> <dkim>fail</dkim> <spf>pass</spf>

03

Why would a small firm see it?

A service that sends for you without DKIM for your domain, or a forger.

04

How do I fix it?

  1. Read the source_ip in the same record and find which service it belongs to.
  2. If it is yours, turn on DKIM signing for your domain at that service.
  3. If it is not yours, raise DMARC to p=quarantine and then p=reject once your own services pass.
05

What else do the sources say?

The important information in the reports is whether messages from your domain pass DMARC.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy