InboxAudit

DKIM fail

A DKIM signature was present but did not verify against the published key.

What causes it

  • The message body was modified in transit — mailing lists that append footers are the classic cause.
  • The published key was rotated or removed while mail signed with the old key was still in flight.
  • A mail gateway rewrote headers that were covered by the signature.
  • The key record is malformed, or was pasted with line breaks inside the p= value.

How to fix it

Look for "body hash did not verify" in the header — that specifically means the body changed after signing, which points at a list or a gateway rather than at your DNS. If the whole signature fails instead, re-check that the selector record is published exactly as your provider generated it.

Check your domain

Also searched for: dkim=fail, dkim signature invalid, dkim body hash did not verify.