DNSLOOKUP

DKIM Record Validator

Validate and analyze DKIM records for email authentication.

Check DKIM Record

Enter a domain name and selector to validate its DKIM record and check for common issues.

The selector is a unique identifier for the DKIM key. Common selectors include "google" for Google Workspace, "default" for many providers, or "selector1" for Microsoft 365.

About DKIM Records

DKIM (DomainKeys Identified Mail) is an email authentication method designed to detect email spoofing. It allows the receiver to check that an email claimed to come from a specific domain was indeed authorized by the owner of that domain.

How DKIM Works

  1. The sender's email server adds a digital signature to the email header
  2. This signature is created using a private key known only to the sender
  3. The public key is published in the DNS as a TXT record at [selector]._domainkey.[domain]
  4. The receiving server uses this public key to verify the signature

Common DKIM Issues

  • Missing record: No DKIM record found at the specified selector
  • Invalid syntax: The DKIM record doesn't follow the required format
  • Weak key: Using keys shorter than 1024 bits is not recommended
  • Testing mode: Records with t=y flag are in testing mode and may be ignored

Example DKIM Record

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZvG...

This example shows a DKIM record with version (v=DKIM1), key type (k=rsa), and a public key (p=...). The public key is typically much longer and encoded in base64.

DKIM VALIDATOR FAQs