DKIM Record Lookup

Verify your domain's DKIM configuration for email authentication and message integrity.

>_
Enter a domain and selector to check DKIM records
Results will show the DKIM public key and configuration

What is DKIM?

DKIM (DomainKeys Identified Mail) is an email authentication method that allows the sender to digitally sign emails. The receiving server looks up the sender's public key in DNS to verify the signature and confirm the message was not altered in transit.

How It Works

DKIM records are stored as TXT records at selector._domainkey.domain. The selector is chosen by the domain owner and is included in the DKIM-Signature header of each email.

google._domainkey.example.com. 300 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0G..."

Common DKIM Selectors

  • google — Used by Google Workspace
  • default — Common default selector for many providers
  • s1, s2 — Used by Microsoft 365 / Exchange Online
  • selector1, selector2 — Also used by Microsoft 365
  • k1 — Used by Mailchimp
  • mailo — Used by Mailgun
  • smtp — Generic selector used by some providers

Finding Your Selector

Check the DKIM-Signature header in a received email. Look for the s= tag, which contains the selector value.