Skip to contentSkip to navigationSkip to topbar
Twilio SendGrid Docs
Page tools
Useful for sharing or LLM
On this page
Looking for more inspiration?Visit the

Migrating to 2048 Bit DomainKeys Identified Mail (DKIM)

Twilio SendGrid uses 2048-bit DomainKeys Identified Mail (DKIM) keys(link takes you to an external page) to provide stronger security and protection. Existing domain authentication configurations don't change automatically. To enhance the security of your existing setup, follow this guide.

If you created your first domain authentication after May 2021, you already have a 2048 DKIM key.

Check your DKIM key length

check-your-dkim-key-length page anchor

To determine whether you have 1024-bit or 2048-bit DKIM keys, use the DKIM Key Checker tool(link takes you to an external page). The tool asks for the selector and domain. If the customer's DKIM key was at s1._domainkey.example.com, then you would enter "s1" in the selector field and "example.com" in the domain field.

Migrate to 2048-bit DKIM keys

migrate-to-2048-bit-dkim-keys page anchor

To migrate to 2048-bit DKIM keys, follow these steps:

  1. Log into your SendGrid account and navigate to Settings.
  2. Select Sender Authentication and then click Authenticate Your Domain.
  3. Continue through the domain authentication process. When you get to the second page, you will need to use a custom selector that differs from the default "s1" that SendGrid uses under the advanced settings. You should use a unique value (eg. 'abc').
  4. Delete the old domain authentication once you have verified the new one.

For more information about DKIM records, go to the DKIM Records Explained page.