Improve Email Security with Redesigned DKIM Keys

To address potential security vulnerabilities with DomainKeys Identified Mail (DKIM) keys, we improved the way they’re created. You no longer have to mess around with public and private keys. Instead, Salesforce publishes the TXT record containing your public key to DNS. We also added automatic key rotation to reduce the risk of your keys becoming compromised by a third party. And, because sharing keys can introduce security vulnerabilities, we removed the ability to import DKIM keys.

Where: This change applies to Lightning Experience, Salesforce Classic, and all versions of the Salesforce app in all editions.

How: Enable this critical update to improve security and make it easier to create and maintain DKIM keys. From Setup, enter Critical Updates in the Quick Find box. Then select Critical Updates. For Enable Redesigned DomainKeys Identified Mail (DKIM) Key Feature with Increased Email Security, click Activate.