I'm trying to determine what level of encryption salesforce supports for DKIM keys? In sum, when Salesforce generates a DKIM key, is it using 1024 bit encryption or 2048 bit encryption?

2 Answers 2


It is using 1024 bits as of today, February 6th 2019. Keys are rotated often though.

  • 3
    Please include a link to the source for your answer. See How to Answer
    – Dave Humm
    Feb 6, 2019 at 17:01

The salesforce documentation does not explicitly describes the DKIM RSA key size, but the options are visible when creating a new key: it is either 1024-bit or 2048-bit (attached screenshot for reference)

Take note of following recommendation, which is also mentioned in salesforce documentation in above link and setup page when creating a new key:

Consider industry-specific security regulations or email recipient limitations when chosing a RSA key size. Some regulations, such as the Federal Information Processing Standard (FIPS), require specific key sizes.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.