Showing results for 
Search instead for 
Did you mean: 
Get your Payroll questions answered by a QuickBooks Product Manager here -

Advanced Payroll Email Sender Authentication: Setting up DKIM

NOTE: In order to set up DKIM authentication, you need access to the domain's DNS settings. For this reason, you are not able to follow this process for restricted email domains (e.g. Yahoo, Gmail) because in those cases, you don't have access to the DNS settings.

The instructions here will help you set up DKIM (DomainKeys Identified Mail) on a domain of your choice for emails sent via Advanced Payroll from an address nominated by you, (such as payslip notifications, leave or expense requests, report packs). This is to ensure that mail servers that receive these emails don’t think we are trying to spoof your emails because we are pretending to be you, and so won’t put the emails in the recipient’s Spam/Junk folders.

Eg. if the domain for your company was, and we sent payslip notifications to your employees with a From Address of, receiving mail servers will not believe that the incoming emails were from you as they can easily see that they were from us, and so will mark the emails as spam. To avoid this issue we can sign the emails with DKIM.

Setting up DKIM Email Authentication requires you to make changes in your Payroll settings and your DNS host.

To set up DKIM authentication:

  1. Go to Payroll, Payroll settings, and then Email Sender Authentication.
  2. Click on the Add button (or follow the 'add a new DKIM authentication now?' link)
  3. Enter in the domain you wish to authenticate.
  4. Click Register
  5. The system should generate a set of CNAME records on screen, that you will need to add to your DNS settings. You'll need to contact your IT dept or web admin for further assistance on adding these records if required.
  6. Add the DNS records to your DNS registry - This happens within your DNS host settings. You'll need to contact your IT dept or web admin for further assistance if required.
  7. Once you've done that, come back to Payroll settings, Email Sender Authentication, click the Unvalidated button for your domain.
  8. If you've created the records correctly, the domain will be Validated.
    Once your domain has been Validated, any email we send for you on your behalf that uses that domain as the From Address will be signed with DKIM, and will have a very good chance of being delivered to the recipient's inboxes.

Was this helpful?

You must sign in to vote, reply, or post

Need to get in touch?

Contact us