Skip to content

Glossary

DKIM

DomainKeys Identified Mail: the cryptographic signature that proves an email really comes from your domain and hasn’t been altered.

DKIM (DomainKeys Identified Mail) signs each email sent with a private key. The matching public key is published in the domain’s DNS, under a selector such as google._domainkey. The recipient verifies the signature: it proves the email comes from the stated domain and wasn’t altered on the way. With SPF and DMARC, it’s one of the three authentications Gmail and Yahoo require from senders.