DomainKeys Identified Mail, or DKIM, is a method for checking the legitimacy of an email using a digital signature. When DomainKeys Identified Mail is activated for a given domain, a public cryptographic key is published to the global Domain Name System and a private one is kept on the mail server. If a new email is sent, a signature is generated using the private key and when the email message is received, the signature is validated by the incoming mail server using the public key. In this way, the recipient can easily tell if the email message is genuine or if the sender’s address has been forged. A discrepancy will occur if the content of the email has been altered in the meantime as well, so DKIM can also be used to ensure that the sent and the delivered emails are identical and that nothing has been attached or removed. This validation system will enhance your email safety, since you can validate the legitimacy of the important email messages that you receive and your colleagues can do the exact same thing with the email messages that you send them. Depending on the particular mail service provider’s policy, a message that fails the check may be removed or may reach the recipient’s mailbox with a warning flag.