← Back to glossary
✉️

DKIM

Security

DomainKeys Identified Mail: cryptographic signing of email using domain-published public keys for validation.

Definition

DKIM signs outgoing email with a private key. Receivers validate using the public key in DNS. Alignment with DMARC improves protection against visible-From spoofing.

In plain English DomainKeys Identified Mail: cryptographic signing of email using domain-published public keys for validation.

Why this matters

Why it matters: DKIM strengthens authenticity and integrity, reducing spoofing and tampering.

Example

Example: Rotate DKIM keys, use strong algorithms, and align DKIM/SPF with DMARC.