Free Tool
DKIM Record Checker
Look up a DKIM public-key record by selector and domain. See the key type, size, and every tag explained — plus quick-picks for common providers.
Common selectors (fills the selector, then enter a domain):
Not sure of the selector? It's the s=value in a signed email's DKIM-Signature header. Queries over DNS-over-HTTPS; nothing stored.
About DKIM records
Selectors are per-sender
Each email service uses its own selector(s). One domain can have many — one per tool that sends on its behalf. Check each sender you use.
2048-bit is the standard
1024-bit keys still work but are considered weak. If your provider supports it, rotate to a 2048-bit key. An empty p= means the selector is revoked.
See DKIM results across every sender
DDMARC's aggregate reports show which senders actually pass DKIM (and SPF, and DMARC alignment) — not just whether a selector exists. Free for 2 domains, no card.