DKIM Record Checker
Validate the DKIM key that lets your mail be cryptographically signed — proof to inbox providers that your messages really came from you and weren't tampered with.
Email Authentication
DKIM Record Checker
Validate your domain's DKIM key so your email can be cryptographically signed and trusted by inbox providers.
Leave the selector blank to try common ones (google, selector1, default…), or enter the selector from your email provider.
Validate your DKIM key in three steps
Enter domain + selector
DKIM lives on a provider-specific selector. Add yours, or let us try the common ones.
We fetch the key
We look up selector._domainkey on your domain and read the public key.
Confirm it's valid
See whether a signing key is published and ready to authenticate your mail.
More free tools
Common questions
What is a DKIM selector?
A label your provider uses to publish its public key, e.g. google for Workspace or selector1 for Microsoft 365. The full record lives at selector._domainkey.yourdomain.com.
Where do I find my selector?
Look at the DKIM-Signature header (the s= tag) of an email you've sent, or check your email provider's admin console.
Why does the check fail if my email is signed?
We can only guess common selectors. If yours is custom, enter it directly — a fail on auto-detect usually just means an unknown selector, not a missing key.
Can I have more than one DKIM key?
Yes — multiple selectors are common when you send through several providers or rotate keys. Each lives on its own selector.
DKIM set up for you, every time
Outboundry ships pre-warmed mailboxes that are DKIM-signed (plus SPF and DMARC) out of the box — so every sender authenticates correctly without you touching DNS.
Join 1,000+ teams running smarter outbound on Outboundry.