QuickBooks HelpQuickBooksHelpIntuit

How to set up DKIM in QuickBooks Online Advanced Payroll

by Intuit• Updated 1 year ago

If you're sending email on behalf of your business, you'll want to make sure it arrives in your recipients' inboxes. One way to improve your email deliverability is to set up DKIM for your domain in QuickBooks Online.

DKIM stands for DomainKeys Identified Mail, and it's a way to verify that an email message is coming from the domain it claims to be coming from. Once your domain has been validated, any emails we send for you on your behalf that uses that domain as the From Address will be signed with DKIM.

When you set up DKIM on a domain of your choice for emails sent via Advanced Payroll from an address nominated by you (such as payslip notifications, leave or expense requests, report packs), it helps ensure that mail servers that receive these emails don’t think we are trying to spoof your emails because we are pretending to be you, and so won’t put the emails in the recipient’s Spam/Junk folders.

For example, if the domain for your company was mybusiness.co.uk, and we sent payslip notifications to your employees with a From Address of payman@mybusiness.co.uk, receiving mail servers will not believe that the incoming emails were from you as they can easily see that they were from us, and so will mark the emails as spam. To avoid this issue we can sign the emails with DKIM.

Setting up DKIM Email Authentication requires you to make changes in your Payroll settings and your DNS host.

Note: To set up DKIM authentication, you need access to the domain's DNS settings. For this reason, you are not able to follow this process for restricted email domains (like Yahoo or Gmail) because in those cases, you don't have access to the DNS settings.

Here's how you can set it up in Advanced Payroll.

  1. Go to Payroll, and select the Payroll Settings tab.
  2. Under Advanced, select Email Sender Authentication.
  3. Select Add.
  4. Enter the domain you wish to authenticate.
  5. Select Register.
  6. QuickBooks will generate a set of CNAME records that you'll need to add to your DNS settings. You may need to contact your IT department or website administrator for assistance on adding these records if required.
  7. Add the DNS records to your DNS registry–this happens within your DNS host settings.
  8. Once you've done that, go back to your Payroll settings.
  9. Select Email Sender Authentication.
  10. Select Unvalidated for your domain.
  11. If you've created the records correctly, the domain will be Validated.
QuickBooks Online Payroll Advanced

Sign in now for personalized help

See articles customized for your product and join our large community of QuickBooks users.