Salesforce allows for Multi-Factor Authentication to be enabled and will be enforcing MFA for all user logins starting Winter '22. This article provides instructions on enabling MFA in your Org.
When you create a DKIM key, Salesforce publishes the TXT record containing your public key to DNS. They also automatically rotate keys to reduce the risk of your keys becoming compromised by a third party.