DKIM Record Checker

Point this at a domain and a selector to see the DKIM key it publishes. Not sure which selector to use? Leave it blank and the common provider selectors are tried for you.

How to use

1. Enter the domain you send mail from.
2. If you know the selector, type it. Otherwise leave the field empty and the tool tries the selectors used by the major providers.
3. Check the key length. Anything below 1024 bits is too weak and should be regenerated.

Frequently asked questions

Where do I find my selector?

Open the raw headers of a message you sent and look at the DKIM-Signature line: the selector is the value after s=.

Why does a scan find nothing when mail is signed?

Selectors are arbitrary strings and this list only covers the popular providers. A custom selector will not be found unless you type it in.

What does p= with no value mean?

An empty public key means the key has been revoked. Any signature made with that selector will fail.