DKIM Record Checker
Verify the DKIM public key published by a domain. Leave the selector blank to probe 20+ common selectors (google, selector1, k1, mailgun, etc.).
What is DKIM?
DKIM (DomainKeys Identified Mail) cryptographically signs each outgoing message with a private key. Receivers fetch the matching public key from your DNS at <selector>._domainkey.<domain> and verify the signature, proving the email wasn't tampered with in transit.
Selectors explained
A selector is a short name (e.g. google, selector1, k1) that lets you rotate keys without breaking everything. Each sending platform uses its own, Google Workspace uses google, Microsoft 365 uses selector1 and selector2, SendGrid uses s1 and s2.
What to look for in a DKIM record
v=DKIM1, version (required).k=rsa, key type.p=…, the base64 public key. Emptyp=means the key has been revoked.
Best practice
Rotate DKIM keys every 6–12 months and use 2048-bit keys whenever your DNS provider supports them.
Ship cold email that actually lands
Icemail bundles dedicated infrastructure, warmup, enrichment, and a unified inbox so your deliverability stays green.
See pricing