DKIM Record Checker
Look up DKIM public key records for any domain. Enter a selector or use auto-detect to probe common ones — see the full record and status instantly.
Use auto to probe common selectors, or enter a specific selector name.
What we check
Everything about your DKIM configuration
DKIM is the cryptographic layer that proves your emails haven't been tampered with in transit.
Selector lookup
Queries DNS for the DKIM TXT record at selector._domainkey.yourdomain.com. Supports auto-detection of common provider selectors.
Record validation
Checks the record is properly formatted with a valid public key (p= field), correct version (v=DKIM1), and key type (k=rsa or k=ed25519).
Multiple selectors
You can check multiple selectors in one query by entering them comma-separated. Useful when you use several ESPs each with their own DKIM key.
Full key display
The raw DKIM record is shown in full so you can copy it, compare it with your ESP's expected value, or check for truncation.
DKIM Questions
Common questions about DKIM records and selectors.
What is a DKIM selector?
A selector is a label that points to a specific DKIM public key in DNS. It allows a domain to have multiple DKIM keys in use simultaneously — for example one per email provider. The selector appears in the DKIM-Signature header of outgoing emails as s=selectorname.
Why does "auto" sometimes find no records?
Auto mode probes the most common selectors used by major providers (Google, Microsoft, Mailchimp, SendGrid, etc.). If your provider uses a custom or randomly generated selector, it won't be found automatically. Check your email headers or your ESP's DKIM setup page to find your selector name.
How do I find my DKIM selector?
Send an email from your domain to a Gmail account, open it, click the three dots → "Show original", and look for the DKIM-Signature header. The s= field is your selector. Alternatively, check your email provider's DNS setup guide.
What does a DKIM pass or fail mean?
Pass means the public key was found in DNS and is properly formatted. Fail or missing means the record doesn't exist for that selector, or it's malformed. Emails sent without a valid DKIM signature are more likely to land in spam and will fail DMARC alignment.
Can I have multiple DKIM records?
Yes — and you should, if you use multiple email providers. Each provider gets its own selector and key pair. DMARC alignment requires at least one DKIM signature that aligns with the From domain.
DKIM is one of three layers
DKIM signatures mean nothing without DMARC to enforce alignment. Check all three records to get the full picture.