DKIM Checker

Check a domain's DKIM record for a specific selector.

DKIM selectors aren't discoverable automatically — check your email provider's setup documentation, or a recent email's headers, for the exact selector name.

About this tool

DKIM (DomainKeys Identified Mail) lets a receiving mail server cryptographically verify that a message genuinely came from the domain it claims and wasn't altered in transit. Unlike SPF and DMARC, a DKIM record lives at a selector-specific location (selector._domainkey.domain.com) — there's no single fixed place to look it up, which is why this tool asks for both the domain and the selector.

Finding your selector

Your email provider's setup documentation usually names it explicitly (Google Workspace commonly uses "google", for example). It's also visible in the DKIM-Signature header of any email actually sent from your domain, in the s= field.

Related tools: