Learn

DKIM (DomainKeys Identified Mail)

DKIM (DomainKeys Identified Mail) is an email-authentication method that attaches a cryptographic signature to each message. The receiving server verifies the signature against a public key in the sender's DNS, proving the message wasn't altered in transit and genuinely came from the signing domain.

How it works

Your mail server signs outgoing messages with a private key; you publish the matching public key as a DNS TXT record at a named selector. Receivers fetch the key and validate the signature.

Why it matters

DKIM survives forwarding better than SPF and is required (with SPF and DMARC) by Gmail and Yahoo for bulk senders. Valid DKIM alignment is a core trust signal for inbox placement.

How Autocloz handles it

Autocloz monitors DKIM signing and alignment for every sending domain and surfaces broken or unaligned selectors in the deliverability view so you fix them before sending volume.

FAQ

What is DKIM alignment?

Alignment means the domain in the DKIM signature matches the visible From domain. DMARC passes when SPF or DKIM is aligned; unaligned signatures still fail DMARC.

Related terms