DKIM Record Checker
Look up a domain's DKIM TXT record(s) at <selector>._domainkey.<domain>.
A broken DKIM record sends your email straight to spam — silently.
Get alerted when DKIM breaks
- ✓Continuous DKIM validation
- ✓Instant fail alerts
- ✓SPF and DMARC correlation
- ✓Email + Slack notifications
- ✓Selector change detection
- ✓Deliverability score tracking
Frequently Asked Questions
What is a DKIM record?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing email. The public key is published as a DNS TXT record at <selector>._domainkey.yourdomain.com. Receivers use it to verify the message was signed by your domain and wasn't altered in transit.
What is a DKIM selector?
A selector is a label that lets a domain publish multiple DKIM keys — the signature header names which one to look up. Common selectors are google, selector1/selector2 (Microsoft 365), k1 (Mailchimp), or s1. You need to know your provider's selector to look up the record.
How do I find my DKIM selector?
Open a message you sent and inspect the DKIM-Signature header — the s= tag is the selector and d= is the signing domain. Your email provider's setup docs also list the selector(s) they use.
Why is my DKIM record not found or failing?
Usual causes: the wrong selector, the record not yet propagated, the key split across TXT chunks incorrectly, or the key was rotated by your provider. Confirm the exact selector and that the published key matches what your provider expects.