Your DKIM signature is not valid

I performed a test at and the score was really bad. Largely due to DKIM signature is not valid. How do I make this valid? I did a search for DKIM in the setup guide and there’s only one instance it’s mentioned at the bottom of the page in the Systems Checks section where if you want to double-check that your system is configured correctly.

The error said:

We were not able to retrieve your public key.
Please ensure that you inserted your DKIM TXT DNS record on your domain ********.com using the selector mail.
If you recently modified your DNS, please be patient and test again your Newsletter in 12 hours, it may take some time for the DNS to be propagated

1 Like

Are you using your MIAB as your domain name server or are you using another provider, such as your domain registrar?

I am not sure. I have the domain registered at The NS records point to Linode:,,, and

In my linode account I have a DNS Manager where I have the following entries:

NS Records ********.com Default ********.com Default ********.com Default ********.com Default ********.com Default

.com ********.com Default ********.com 300 (5 minutes) .com 300 (5 minutes)
.com ********.com Default

MX Records

box.********.com 10 Default

A/AAAA Records

@ Default Default Default
www Default
box Default

@ 2600:xxxx::xxxx:xxxx:xxxx:xxxx Default 2600:xxxx::xxxx:xxxx:xxxx:xxxx Default 2600:xxxx::xxxx:xxxx:xxxx:xxxx Default
www 2600:xxxx::xxxx:xxxx:xxxx:xxxx Default
box 2600:xxxx::xxxx:xxxx:xxxx:xxxx Default

Yesterday I added this TXT record and I think it corrected this issue:

v=spf1 a mx ~all Default

I ran the mail test again and my scores have improved a lot. It went from 4.9 to 6.9. However, now want to improve the score even more. Here is the latest issue.

SpamAssassin thinks you can improve

-1.985 PYZOR_CHECK Listed in Pyzor (

How do I get un-listed in Pyzor? That seems to be the biggest issue with my current score.

You’re using Linode for DNS, not MIAB. To resolve the DKIM issues you’ll need to add the DKIM records listed under System -> External DNS, into the appropriate DNS for the domains you’re trying to send mail for.

It looks you can request a whitelisting here

1 Like

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.