VerifySeal ManagerLive verification platform
← All installation guides Email authentication and DNS

Set up DirectAdmin Email & DKIM for an Email Sender Seal

Enable DKIM for a DirectAdmin-hosted domain, identify its selector and prepare the email sender seal.

DA✉
Recommended methodEmail DNS and seal setup
Email authentication setup

Configure email DNS and find the selector

  1. 1

    Enable DKIM for the domain

    At User Level open Email Accounts and choose Enable DKIM when the option is available. If it is missing, ask the server administrator to enable DirectAdmin DKIM support.

  2. 2

    Locate the public DKIM record

    Open DNS Management for the sender domain and find the TXT record whose name ends in ._domainkey. If DNS is hosted elsewhere, copy the record to the authoritative DNS provider exactly as DirectAdmin supplies it.

  3. 3

    Read the selector

    The selector is the label before ._domainkey. For example, x._domainkey.example.com has the selector x. Confirm the active value by checking s= in the DKIM-Signature header of a new external test message.

  4. 4

    Check SPF and DMARC

    Keep one SPF TXT record at the root domain and publish the required DMARC TXT record at _dmarc. Do not create a second SPF record; merge authorized senders into the existing policy.

  5. 5

    Validate and install the seal

    Enter the confirmed selector in the VerifySeal application, run the email DNS check, then use the Roundcube or other email-program guide to add the issued seal to the sender signature.

Open DirectAdmin DKIM documentation ↗
Email Sender Verification Seal

Complete authentication before installing the seal

The sender domain must continue to publish a valid SPF record, the selected DKIM key and a DMARC policy. VerifySeal automatically rechecks these records according to the administrator schedule. For High Security messages, DKIM must cover the final Message-ID, VEM header and completed body.

  • SPF authorizes sending services
  • DKIM verifies the signed message domain
  • DMARC publishes the domain policy
Testing checklist

Confirm the installation is working

01

SPF

The sender domain has one valid SPF record containing every authorized sending service.

02

DKIM

A new external message reports DKIM pass and its matching signature contains the selector entered in VerifySeal.

03

DMARC

A DMARC record is published at _dmarc and its policy matches the organization’s approved rollout.

04

VerifySeal

The customer order reports SPF, DKIM and DMARC as verified before the Email Sender Seal is issued.

Platform notes
  • DirectAdmin can only create the DNS record automatically when it controls the authoritative DNS zone.
All seal types

View every available VerifySeal design

Domain OwnershipEmail Sender VerificationHigh Security Email VerificationVerified BusinessVerified OrganizationVerified ResellerTrusted WebsiteCertified MemberAustralian Builder LicenceAustralian Financial Services LicenceWebsite PCI DSS ComplianceDocument IntegrityVerified Issuer DocumentHigh Security Document Authentication