Glossary term

DomainKeys Identified Mail (DKIM)

Definition

An authentication method that attaches a cryptographic signature to outgoing email, letting the receiving server verify the message was not altered in transit and truly came from the signing domain. The public key used to check the signature is published in the domain's DNS records.

DomainKeys Identified Mail (DKIM) is an email authentication method that attaches a cryptographic signature to each outgoing message. The receiving mail server uses a public key published in your domain’s DNS to check that signature, confirming the message truly came from the signing domain and was not changed in transit. It is one of the three core email authentication standards, alongside SPF and DMARC.

How it works

Your sending server signs selected parts of each email (usually the headers and body) with a private key. It adds a DKIM-Signature header that names the signing domain and a selector. The receiving server looks up the matching public key in DNS (at selector._domainkey.yourdomain.com), recomputes the hash, and compares. If they match, the message passes DKIM. If the body was altered or the signature does not verify, it fails.

Why it matters

Mailbox providers like Gmail and Outlook weigh DKIM heavily when deciding whether a message lands in the inbox or spam. Since 2024, Gmail and Yahoo require DKIM (and SPF and DMARC) for anyone sending in volume. A domain without valid DKIM is far more likely to be filtered or spoofed.

Applying it to B2B quoting on Shopify

If you send quotes from your own domain rather than a generic address, DKIM decides whether those quotes reach the buyer’s inbox. A quote that lands in spam stalls the deal. When you use a tool that sends from your domain, such as ShopQuotes, you (or the tool’s provider) publish a DKIM record so your Live Quote emails authenticate cleanly. Deliverability is not a marketing detail here. It is the difference between a buyer seeing your quote and never knowing it was sent.

See the full B2B quoting glossary for related terms like SPF and DMARC.

Frequently asked

Is DKIM enough on its own?

No. DKIM works best combined with SPF and a DMARC policy. DMARC tells receivers what to do when DKIM or SPF fails and gives you reporting, so the three are typically set up together.

Where does the DKIM key live?

The private key stays on your sending server or with your email provider. The matching public key is published as a TXT record in your domain's DNS, which receiving servers look up to verify each signature.

Do I need DKIM to send quotes from my own domain?

Practically, yes. Without DKIM, quotes sent from your domain are more likely to be flagged as spam or spoofing, and major providers now require it for reliable delivery.

Turn quote requests into paid orders

ShopQuotes is a free-to-start Shopify app for branded, checkout-ready quotes.