Business
Business Security · Overview Executive Protection
Individual
Personal Protection · Overview Personal Credential Scan
Programs
Family Offices Wealth Firms Sports & Entertainment Agencies Reputation Threat Intelligence Wealth Manager Program Business Broker Program Partners
Intelligence
Research Library Threat Intelligence Global Breach Map Recent Breach Disclosures
Company
How It Works About Contact
Sign In
Cyber-intelligence glossary

DKIM

DomainKeys Identified Mail

A cryptographic email signing standard that lets receiving servers verify a message was actually sent from the claimed domain and was not modified in transit.

Definition

DKIM (DomainKeys Identified Mail) uses public-key cryptography to sign outbound mail. The sending mail server signs each message with a private key; the corresponding public key is published in DNS. Receiving mail servers fetch the public key, verify the signature, and confirm the message was sent by an authorized server for that domain and was not altered in transit. DKIM is standardized in RFC 6376. DKIM alignment with the From: header domain is a required component of DMARC enforcement. Rotated keys, key length below 1024 bits, and unsigned mail-authentication headers all weaken DKIM protection.

Why it matters

A domain without DKIM, or with weak DKIM keys, cannot enforce DMARC. Advisor tenants (CPA, attorney, wealth manager) that lack DKIM are one email spoof away from a wire-fraud pretext landing in the principal inbox. LeakTrace evaluates DKIM alongside SPF and DMARC as part of the wire-fraud precursor surveillance layer.

Related LeakTrace pages
Related program
Family Office Intelligence
Related program
Wealth Manager Program
Related terms
DMARC
An email authentication protocol that tells receiving mail servers what to do with messages that fail sender authentication (SPF or DKIM).
SPF
A DNS record listing which mail servers are authorized to send email on behalf of a domain.
Business Email Compromise (BEC)
A category of wire-fraud attack where the attacker impersonates a trusted party (executive, vendor, advisor) over email to redirect a payment to a fraudulent account.
Discovery call
Mutual NDA on request. Reply within one business day.
Book at [email protected]. Full glossary at getleaktrace.com/glossary. Frequently asked questions at getleaktrace.com/faq.