How to use this check
Enter a domain and selector to inspect DKIM metadata without exposing the raw key in analytics.
The API validates the selector as a DNS label, then reads TXT at selector._domainkey.domain.
Choose an amount before the secure payment page opens.
Authentication
Live DNS checkDKIM Checker
Check a selector._domainkey TXT record and confirm that a DKIM public key is published.
Health score--Live DNS check
Signal checklist
The result shows whether a DKIM record exists, key type, key presence and DNS safety notes.
DKIM Checker
Enter a domain and selector to inspect DKIM metadata without exposing the raw key in analytics.
Result
The result shows whether a DKIM record exists, key type, key presence and DNS safety notes.
Support
Keep this free result available
Use the result first. Support and promotional areas stay separate from the useful result.
- Useful result first
- No signup required
- Promotions kept separate
Choose an amount before the secure payment page opens.
Guide and interpretation
How to interpret the result
A DKIM record must publish v=DKIM1 and a public key tag; missing keys cause signed mail to fail DKIM.
Example
If selector default is used, the DNS name is default._domainkey.example.com.
Common issues and next steps
Teams often rotate ESP providers but leave the old selector in DNS or forget to publish the new one.
Confirm the active selector in the sending platform and publish only valid current DKIM records.
Methodology and limits
The free check does not fetch a sample message, verify a signature body hash or audit all selectors.
FAQ
Where do I find the selector?
Your email provider usually shows it in DKIM setup instructions; common examples are default, selector1 or google.
Does the page store my DKIM key?
No. The raw key is not sent to analytics and the free response summarizes key presence rather than saving a record.