DKIM Record

    Mimecast's DMARC solution protects beyond DKIM signatures and DKIM records by preventing attackers from spoofing emails.

    Free DKIM Record Check

    Check My Domain

    Can a DKIM record stop email attacks?

    Email is the #1 vector for cyberattacks today. Attackers can easily spoof an email address, sending messages that appear to come from a trusted source. As a result, authentication techniques like DomainKeys Identified Mail (DKIM) have been developed to provide better verification that an email and its sender are valid.

    With DKIM, a sender signs an email with a cryptographic signature that verifies the email comes from a legitimate source and that it was not altered during transit. A receiving mail server validates the DKIM signature by using the public key found in the domain's DKIM record, part of its DNS record. Senders can maintain multiple DKIM records for various sending sources.

    Using a DKIM record will likely improve email delivery, ensuring that fewer messages end up in junk or spam folders. But DKIM signatures and DKIM records on their own can't prevent all forms of spam and attacks, as the protocol does nothing to prevent attackers from spoofing the visible "from" part of the email header – the information that recipients see.

    The DMARC protocol (Domain-based Message Authentication, Reporting & Conformance) builds on DKIM as well as SPF (Sender Policy Framework) to significantly improve email security. But implementing DMARC can be complicated and time-consuming without an expert guide. That's where Mimecast can help.

    Can a DKIM record stop email attacks?

    Email authentication with Mimecast

    Mimecast DMARC Analyzer provides the tools and resources organizations need to reduce the time and complexity of deploying DMARC and managing DMARC policy. Offered as a 100% SaaS solution, DMARC Analyzer serves as a guide for deploying DMARC as quickly as possible. Unlike other solutions that require considerable professional services for implementation and ongoing maintenance, DMARC Analyzer is designed to make everything as simple as possible for email administrators.

    DMARC Analyzer provides:

    • 360° visibility and governance across all email channels – essential for ensuring that legitimate email does not get blocked when enforcing a DMARC reject policy.
    • Easy-to-use alerts, reports and charts to help achieve enforcement and monitor performance.
    • The tools to easily manage a complex DMARC deployment.
    Email authentication with Mimecast

    Interested in learning more?

    Schedule a Demo

    DMARC Analyzer: key features

    DMARC Analyzer simplifies DMARC deployment with a step-by-step approach and self-service tools that enable faster movement to DMARC enforcement. DMARC Analyzer offers:

    • Unlimited users, domains and domain groups, enabling administrators to ensure full coverage.
    • Setup wizard for DMARC records.
    • Forensic reports that simplify the task of identifying and tracking down the sources of malicious email.
    • Daily and weekly summary reports that allow administrators to track progress over time.
    • Tools to monitor DNS changes and receive alerts when a record is altered.
    • User-friendly aggregate reports and charts that enable easier analysis and faster time to DMARC policy enforcement.
    • Enhanced security based on two-factor authentication.
    • Validators for DMARC, SPF and DKIM records.
    • Managed services (optional) that enable organizations to minimize risk while moving to DMARC enforcement in the shortest time possible.
    DMARC Analyzer: key features

    Additional email security options with Mimecast

    Mimecast DMARC analyzer is part of Mimecast's comprehensive approach to email and web security. Additional security solutions from Mimecast include:

    • Mimecast Email Security with Targeted Threat Protection. Mimecast's Secure Email Gateway defends against inbound spear-phishing, malware, spam, zero-they attacks and other threats using multiple detection engines and threat intelligence feeds. Mimecast solutions also protect against malicious links and attachments, threats generated through internal email, and impersonation attacks that use domain similarity.
    • Mimecast Web Security. Mimecast adds security and monitoring at the DNS layer to protect against malicious web activity, block business-inappropriate websites and mitigate the risk of shadow IT caused by uncontrolled usage of cloud applications.
    • Mimecast Information Protection. Mimecast inspects the content within emails and attachments to prevent data leaks and enhance content control. Mimecast also provides a service that makes it easy to securely send messages as well as large files that would normally exceed mailbox limitations.
    • Mimecast Brand Exploit Protect. Mimecast uses machine learning and quadrillions of targeted scans to protect against website spoofing attacks by identifying domains and websites that may be attempting to impersonate a trusted brand.
    • Mimecast Awareness Training. Mimecast offers highly effective training for employees that helps to reduce the role that human error plays in security breaches.
    Additional email security options with Mimecast

    FAQs: What is a DKIM record?

    What is DKIM?

    DomainKeys Identified Mail, or DKIM, is a way of authenticating email messages by adding a digital signature that ensures the email comes from a trusted source and has not been changed in transit. DKIM uses a private key to sign the email and publishes a public key in the domain's DNS that receiving mail servers can use to authenticate email.

    What is a DKIM record?

    A DKIM record is a line of text in a DNS record that contains the public key which can be used to authenticate a DKIM signature.

    What is a DKIM record check?

    A DKIM record check is a diagnostic tool that tests the domain and selector for a published DKIM record. A DKIM record check can highlight any potential issues or errors in a DKIM record that may impact successful mail delivery. Mimecast offers a free DKIM record check, along with free DMARC and SPF record checks.

    FAQs: What is a DKIM record?

    Expert Security Insights

    Additional security resources you may be interested in: