DKIM Record Checker
Look up a DKIM public-key record by selector and domain. See the key type, size, and every tag explained — plus quick-picks for common providers.
Not sure of the selector? It's the s=value in a signed email's DKIM-Signature header. Queries over DNS-over-HTTPS; nothing stored.
About DKIM records
Selectors are per-sender
Each email service uses its own selector(s). One domain can have many — one per tool that sends on its behalf. Check each sender you use.
2048-bit is the standard
1024-bit keys still work but are considered weak. If your provider supports it, rotate to a 2048-bit key. An empty p= means the selector is revoked.
See DKIM results across every sender
DDMARC's aggregate reports show which senders actually pass DKIM (and SPF, and DMARC alignment) — not just whether a selector exists. Free for 2 domains, no card.
More free tools
DMARC Report Analyzer
Paste or upload a DMARC aggregate (RUA) report and see total volume, pass/fail rates, and which senders are failing. Runs in your browser.
Use ToolDMARC Record Generator
Create a valid DMARC record for your domain. Configure policy, reporting emails, and advanced options.
Use ToolSPF Record Generator
Build an SPF record to authorize your email senders. Includes common services and DNS lookup counter.
Use ToolDomain Checker
Check your domain's email authentication setup. See your SPF, DKIM, DMARC, and MTA-STS configuration.
Use ToolDMARC Record Lookup
Look up any domain's DMARC record and get every tag explained — policy, alignment, reporting, and coverage.
Use ToolMTA-STS & TLS-RPT Checker
Check a domain's MTA-STS policy record and TLS-RPT reporting — the pair that forces inbound mail over TLS.
Use ToolBIMI Record Checker
Look up a domain's BIMI record, preview the logo, and confirm the VMC and DMARC enforcement it requires.
Use Tool