dkim=fail (body hash did not verify)

Question

dkim=fail (body hash did not verify)

Pradeep Kabbur 60

We are getting the error with DKIM in our email. DKIM fails with body hash is not matching and we get the following error dkim=pass (signature was verified) header.d=xyz.com;dkim=fail (body hash did not verify) header.d=xyz.com. we are trying to identify

Anonymous

2025-04-01T01:49:30.2766667+00:00

Hello, @Pradeep Kabbur

It has been a long time since your last update.

Just circling back to check to see how things are going on with this thread.

If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier and be beneficial to other community members as well.

Should you need more help on this, you can feel free to post back.

Best Wishes,

Alex Zhang

1 answer

Your answer

Anonymous

2025-04-01T01:49:30.2766667+00:00

Hello, @Pradeep Kabbur

It has been a long time since your last update.

Just circling back to check to see how things are going on with this thread.

If the issue has been resolved, please mark the helpful replies as answers, this will make answer searching in the forum easier and be beneficial to other community members as well.

Should you need more help on this, you can feel free to post back.

Best Wishes,

Alex Zhang

Answer 1

Hello, @Pradeep Kabbur

Welcome to the Microsoft Q&A platform!

Based on your description, you' encountered a DKIM error where the body hash does not verify. This issue typically arises when the computed hash of the email body doesn't match the hash value stored in the DKIM signature.

Here are some potential causes and solutions:

Common Causes:

1.If the email body is altered during transit, such as by adding a footer or modifying content, the hash will not match.

2.MTAs might change the email body by adding compliance footers or other modifications.

3.Ensure that DKIM records are correctly configured in your DNS settings.

4.Forwarders or gateways might modify the email body, causing the hash mismatch.

5.It is possible that intermediate mail servers or gateways have modified the email content. Some anti-virus or anti-spam systems might alter the email body slightly.

To resolve the issue, you can:

1.Compare the raw content of the email as it leaves your server and as it arrives at the destination to identify any changes.

2.Verify that your DKIM signing process is correctly configured and that the private key used for signing matches the DKIM DNS record's public key.

3.Check if the correct DKIM records exist in your DNS settings.

4.Ensure that any forwarders or gateways are not altering the email body.

5.Use Quoted-Printable Encoding to help preserve the integrity of the email body during transit.

For more guidance, please refer to What Does The "Body Hash Did Not Verify" DKIM Error Mean And How To Address It.

(Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.)

If you continue to experience issues, you might want to reach out to your email service provider's support team for further assistance, as they might have additional insights into their infrastructure that could help resolve the problem.

If the answer is helpful, please click on “Accept answer” as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Thank you for your support and understanding.

Best Wishes,

Alex Zhang

Pradeep Kabbur 60 Reputation points

2025-03-24T14:50:37.6966667+00:00

Hi Alex,

Thank you for the information. How we avoid or make sure body hash will not alter when we have set a policy in Exchange or email security tools or forwarders.

In our case we see issue with policy created in exchange online itself. we also user email security for filtering but we do not see any issue from there. when we check the email trace we see disclaimer and some other policy is present in M 365.

Regards,

Pradeep
Anonymous

2025-03-25T02:26:05.6633333+00:00

Hello, @Pradeep Kabbur,

Thank you for your prompt reply.

To ensure that DKIM body hashes are not changed when setting up Exchange Online policies or using email security tools and forwarders, you first need to review and adjust the mail flow rules. Avoid adding disclaimers and footers, as these modifications may cause DKIM to fail. Test the rules to make sure they don't inadvertently change the body of the email.

Next, use Quoted-Printable encoding to maintain the integrity of the email body. Ensure that email security tools are configured correctly and do not alter the email body. Check forwarders and gateways to ensure that they do not modify the body of the email, and if they do, consider re-signing DKIM.

Finally, make sure Microsoft 365 policies are configured correctly and use email tracking tools to monitor how policies and disclaimers are applied to emails. This helps to identify where body hash mismatches are occurring so you can take action to resolve the issue.

If the answer is helpful, please click on “Accept answer” as it could help other members of the Microsoft Q&A community who have similar questions and are looking for solutions.

Best Wishes,

Alex Zhang

Share via

dkim=fail (body hash did not verify)

1 answer

Your answer