Turn on DKIM in Microsoft 365

Microsoft 365 does not use a long TXT record for DKIM. It uses two CNAME records. The values include your tenant name. Copy them from Microsoft. Do not invent them.

SPF for Microsoft is a TXT record that includes spf.protection.outlook.com.

What to do

1. Sign in at admin.microsoft.com.
2. Open the DKIM page for the domain. It is often under email authentication.
3. Copy the two CNAME records Microsoft shows.
4. Add both at your domain company, then turn DKIM on in Microsoft.
5. Run the grade again after DNS updates.

Check your domain