Business
Business Security · Overview Scope · Domain Audit Shadow · Mailbox Forensics Monitoring · Continuous Coverage Fix Session · Implementation
Individual
Personal Protection · Overview Scope · Personal Credential Scan
Solutions
Dark Web Monitoring Domain Impersonation Protection Credential Breach Detection Compliance Monitoring
Intelligence
Threat Intelligence Global Breach Map Breach Feed
Company
Partners How It Works About Press & Media
Sign In
Cyber-intelligence glossary

DKIM

DomainKeys Identified Mail

A cryptographic email signing standard that lets receiving servers verify a message was actually sent from the claimed domain and was not modified in transit.

Definition

DKIM (DomainKeys Identified Mail) uses public-key cryptography to sign outbound mail. The sending mail server signs each message with a private key; the corresponding public key is published in DNS. Receiving mail servers fetch the public key, verify the signature, and confirm the message was sent by an authorized server for that domain and was not altered in transit. DKIM is standardized in RFC 6376. DKIM alignment with the From: header domain is a required component of DMARC enforcement. Rotated keys, key length below 1024 bits, and unsigned mail-authentication headers all weaken DKIM protection.

Why it matters

A domain without DKIM, or with weak DKIM keys, cannot enforce DMARC. Advisor tenants (CPA, attorney, wealth manager) that lack DKIM are one email spoof away from a wire-fraud pretext landing in the principal inbox. LeakTrace evaluates DKIM alongside SPF and DMARC as part of the wire-fraud precursor surveillance layer.

Related LeakTrace pages
Related program
Family Office Intelligence
Related program
Wealth Manager Program
Related terms
DMARC
An email authentication protocol that tells receiving mail servers what to do with messages that fail sender authentication (SPF or DKIM).
SPF
A DNS record listing which mail servers are authorized to send email on behalf of a domain.
Business Email Compromise (BEC)
A category of wire-fraud attack where the attacker impersonates a trusted party (executive, vendor, advisor) over email to redirect a payment to a fraudulent account.
Discovery call
Mutual NDA on request. Reply within one business day.
Book at [email protected]. Full glossary at getleaktrace.com/glossary. Frequently asked questions at getleaktrace.com/faq.