DKIM Record Checker

Look up a domain's DKIM record and check the selector, public key and key strength. Enter the domain and the DKIM selector used to sign its mail.

What is DKIM?

DKIM (DomainKeys Identified Mail) lets a receiving mail server verify that an email was genuinely sent from your domain and wasn't tampered with in transit. Your mail provider signs outgoing mail with a private key, and publishes the matching public key in DNS as a TXT record at selector._domainkey.yourdomain.com.

Where do I find my selector?

The selector is chosen by whoever sends your mail. Common ones include google (Google Workspace), selector1 / selector2 (Microsoft 365), k1 (Mailchimp) and default. You can also read it from the s= tag in the DKIM-Signature header of an email you received.