Email API: Self-Service DKIM Key Rotation
23, Sep 2026
The Telnyx Email API now supports self-service DKIM key rotation for account-owned custom sending domains. Developers can rotate a domain's DKIM key through the Email Domains API and receive the replacement DNS record to publish.
What's new
- Rotate DKIM keys through the API: Start a rotation for an account-owned custom domain with
POST /v2/email_domains/{domain_id}/rotate_dkim. - Get the replacement DNS record: A successful response returns the updated DKIM DNS record that must be published for the domain.
Why it matters
DKIM helps receiving mail servers verify that messages were signed by the sending domain and were not modified after they were sent.
Self-service rotation gives developers direct control over replacing DKIM keys while keeping domain authentication management within the Email Domains API.
Getting started
Prerequisites
- A Telnyx account
- A Telnyx API key
- An account-owned custom email domain
After rotating the key through the Email Domains API, publish the replacement DKIM record returned by Telnyx in your DNS configuration.
Rotation activates the new key immediately and keeps the existing selector, replacing the TXT value at the same DNS host. Publish the returned TXT value promptly; until DNS caches update, receivers that still have the previous value may fail DKIM validation. Telnyx-managed shared domains cannot be rotated by customer accounts.
Learn more in the Email Domains and DKIM documentation.
