Definition

DKIM (DomainKeys Identified Mail) cryptographically signs outgoing email so receivers can verify the message was not altered in transit and originated from an authorized sender for your domain.

Detailed Explanation

Your email service adds a digital signature in the email header. Receivers look up your public key in DNS (CNAME or TXT on selector._domainkey.yourdomain.com) and verify the signature.

Unlike SPF (IP-based), DKIM survives forwarding better and proves message integrity.

Nepal Context

Mailchimp, Brevo, and SendGrid provide DKIM setup wizards — add their DNS records before your first campaign. Gmail and Outlook weigh DKIM pass heavily for inbox placement in Nepal.

Key Takeaways

  • DKIM = cryptographic proof of sender authenticity
  • Configured via ESP + DNS CNAME/TXT records
  • Check raw email headers for DKIM-Signature: pass

Common Mistakes

  1. Not enabling DKIM signing in ESP after DNS setup
  2. Wrong selector in DNS record
  3. Rotating ESP without updating DKIM records