What Is DKIM
Understanding DKIM
DKIM (DomainKeys Identified Mail) keeps your emails tamper-proof and credible. DKIM slaps a digital signature on your emails that says, ‘this email is legit from our domain and hasn’t been messed with.’
It’s like a digital version of a wax seal for your email.
How DKIM Works (With As Little Jargon As Possible)
When you set up DKIM, your email server adds an encrypted signature header to every email you send. That signature is generated using a private key that only your email provider has.
On the receiving end, mailbox providers retrieve your public key (published in your domain’s DNS records) and use it to verify that the signature is valid.
If it checks out, it means two things:
- The email was truly sent by your domain
- It wasn’t altered in transit (no sneaky link swaps or added phishing content)
If the signature doesn’t match or there’s no DKIM at all, the email provider is left guessing, and often, guessed wrong means the spam folder.
DKIM gives your emails a stamp of authenticity, a cryptographic handshake.
Explore DKIM Authentication help topics.
← All DKIM Authentication guides