DKIM Record Checker
DomainKeys Identified Mail (DKIM) lets receiving mail servers verify that a message was sent and authorized by the owner of a domain.
Workflow
Run check
Inspect a live record
Results are generated on demand so you can verify the current public configuration.
What is DKIM?
DKIM adds a digital signature to outgoing emails. This signature is created using a private
key and can be verified using a public key published in DNS.
What is a selector?
A DKIM selector is a string used to point to a specific DKIM public key record in DNS.
Different email services use different selectors (e.g., Google uses "google", Microsoft uses
"selector1" and "selector2").
Common Selectors:
default
,
google
,
selector1
,
selector2
,
k1
,
dkim
,
mail
What does a DKIM record checker need? +
A DKIM check needs the domain and selector used by your email provider so it can look up the selector._domainkey DNS record.
Why does DKIM fail even when a record exists? +
DKIM can fail if the selector is wrong, the public key is malformed, DNS has not propagated, or the message was modified after signing.
Do I need a separate DKIM record for each provider? +
Usually yes. Each email provider often gives you one or more unique selectors and public keys to publish in DNS.