DKIM Record Checker
Look up your DKIM public key by selector and validate it: we check the key’s presence and format, estimate its strength, and detect CNAME delegation to your email provider.
Try: · ·
What is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your outgoing mail. Receivers fetch your public key from DNS and verify the signature, proving the message wasn’t altered and really came from your domain.
The key lives at <selector>._domainkey.<domain>, where the selector is chosen by your email provider.
Why you need the selector
Unlike SPF and DMARC, DKIM has no fixed location — it depends on the selector your provider uses. We probe common selectors automatically, but if your provider uses a custom one, enter it to check your key directly.
Key strength matters too: RFC 8301 requires at least 1024-bit RSA keys and recommends 2048-bit.
Frequently asked questions
- Where do I find my DKIM selector?
- In your email provider’s admin console (e.g. Google Workspace uses “google”, Microsoft 365 uses “selector1”/“selector2”). It also appears in the DKIM-Signature header of a sent message as
s=. - What does an empty key mean?
- An empty
p=value means the key has been revoked. Re-publish a valid public key to restore DKIM.
Want better inbox placement?
JaxSuite helps you fix authentication, warm up your domains, and land in the inbox.
