DKIM (DomainKeys Identified Mail) is an email authentication protocol that is used to verify that an email message was sent by an authorized sender and that the message has not been altered in transit. DMARC builds on DKIM and adds an additional layer of protection by allowing domain owners to specify how they want email messages that fail DKIM and/or SPF authentication to be handled.