How do I set up DKIM at Wix for Microsoft 365?
Copy the two CNAME records Microsoft shows for your domain in the Defender portal, add them in your Wix DNS records at selector1._domainkey and selector2._domainkey, then turn on DKIM signing for the domain in the same portal.
Last read , from the sources at the foot of this page.
What does DKIM do?
It adds a signature to each message your domain sends. A mail server checks the signature against a key published in your DNS, so a message changed or forged on the way fails.
Where does Microsoft 365 make the key?
In the Defender portal, go to Email & collaboration, then Policies & rules, then Threat policies, then Email authentication settings, and open the DKIM tab. Select your domain. Under Publish CNAMEs, Microsoft shows the two values for your domain. Copy them from there: they differ by domain, and a newer domain uses a newer format.
selector1._domainkeyselector2._domainkeyHow do I add them at Wix?
- Sign in to Wix and go to Domains.
- Click the Domain Actions icon beside your domain and select Manage DNS Records.
- Click + Add Record in the CNAME section, then click Got it.
- Type selector1._domainkey in Host Name. Leave your domain name out: it is added for you.
- Paste the first value Microsoft shows in Value, exactly as copied.
- Click Save, then Save Changes.
- Add the second record the same way, named selector2._domainkey, with the second value.
This works when your domain is connected to Wix by name servers. If it is connected by pointing, add the record at the company that holds the domain instead.
In our words, from Wix: adding a CNAME record, read 14 October 2026. If a screen has changed since, follow the host's own page.
How do I turn signing on?
Go back to the DKIM tab in the Defender portal, select your domain, and set Sign messages for this domain with DKIM signatures to Enabled. If the portal says the records are missing, wait for your DNS change to be seen and try again.
Where does this come from?
- Microsoft: Set up DKIM for your Microsoft 365 domainRead 14 October 2026
- Wix: adding a CNAME recordRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/