DKIM adds a digital signature to outgoing emails, verified by the recipient's server against a public key in your DNS. It proves the email wasn't tampered with in transit and was sent by an authorised server. DKIM + SPF together significantly improve inbox placement. Your ESP generates DKIM keys during custom domain setup — add the CNAME or TXT record they provide to your DNS.