Verify that a DKIM public key is published correctly for a domain and selector.
Enter a domain to look up its DKIM record
DKIM (DomainKeys Identified Mail) lets receiving mail servers verify that an email was authorized by the domain it claims to come from. The sending server signs outgoing emails with a private key, and the public key is published in DNS as a TXT record at {selector}._domainkey.{domain}. Receivers fetch the public key and verify the signature in the email header.
The selector is a label chosen by the email provider - it lets domains use multiple DKIM keys simultaneously (e.g. one per email provider). If you use Google Workspace, the default selector is google. Microsoft 365 uses selector1 and selector2. Your email provider's setup guide will tell you the correct selector for your account.
Sent to our server: Domain and Selector. We look it up in DNS. Part of this work runs on our own server. To answer a repeated check fast, we have to keep answers for 5 minutes; then they are deleted. Also added to the page link, so you can share the result: Domain and Selector.