DKIM Record Checker
Verify the DKIM public key published by a domain. Leave the selector blank to probe 20+ common selectors (google, selector1, k1, mailgun, etc.).
What is DKIM?
DKIM (DomainKeys Identified Mail) cryptographically signs each outgoing message with a private key. Receivers fetch the matching public key from your DNS at <selector>._domainkey.<domain> and verify the signature, proving the email wasn't tampered with in transit.
Selectors explained
A selector is a short name (e.g. google, selector1, k1) that lets you rotate keys without breaking everything. Each sending platform uses its own — Google Workspace uses google, Microsoft 365 uses selector1 and selector2, SendGrid uses s1 and s2.
What to look for in a DKIM record
v=DKIM1— version (required).k=rsa— key type.p=…— the base64 public key. Emptyp=means the key has been revoked.
Best practice
Rotate DKIM keys every 6–12 months and use 2048-bit keys whenever your DNS provider supports them.
Ship cold email that actually lands
Icemail bundles dedicated infrastructure, warmup, enrichment, and a unified inbox so your deliverability stays green.
See pricing