When you send an email, your mail server uses the private key to create a digital signature. This signature is added to the email header. The recipient's mail server then retrieves the public key from the DNS records of the sender's domain to verify the signature. If the keys match, the email is considered authentic.