DomainKeys Identified Mail (DKIM) is an email authentication method that allows the receiver to verify that an email was indeed sent and authorized by the owner of that domain, helping to prevent email spoofing. It works by using a digital signature that is attached to the email, which can be validated by the recipient's mail server using a public cryptographic key published in the sender's DNS records.