Why can't you detect my selector automatically?

DNS provides no way to list selectors for a domain. We only report DKIM as present when a key actually resolves at the selector you give us.

Can I have more than one DKIM key?

Yes. Each sending service usually publishes its own selector and key.

What does p= mean in the record?

It holds the public key. An empty p= means the key has been revoked.

DKIM Checker — Look up your DKIM key by selector

DKIM Checker

Look up the DKIM public key published at your selector. Enter your domain, then add the selector on the report.

No signup required • Fast DNS lookup • Privacy-focused

DKIM needs a selector

DKIM keys are published at <selector>._domainkey.yourdomain.com, so there is no way to find them without knowing the selector your provider uses.

Common selectors are default, google, selector1, selector2 and k1. Your email provider's DNS setup page will tell you which one applies.

Why DKIM matters

DKIM adds a cryptographic signature to your outgoing messages. Receivers use the published key to confirm the message really came from you and was not altered in transit.

Frequently asked questions

More free tools

DNS CheckerInspect every published DNS record for a domain.DNS LookupRaw A, AAAA, MX, TXT, NS, CNAME, SOA and CAA lookups.MX CheckerConfirm the mail servers that receive your email.SPF CheckerValidate the SPF record that authorises your senders.DMARC CheckerRead your DMARC policy and reporting setup.Domain HealthOne score covering DNS and email configuration.