Check your domain's DKIM (DomainKeys Identified Mail) record to ensure proper email authentication and improve deliverability. Get instant validation with detailed recommendations.
A DKIM record checker validates your domain's DomainKeys Identified Mail configuration by querying DNS records with the specified selector and verifying the cryptographic signature setup for email authentication.
Check DKIM records for any selector including default, google, selector1, or custom selectors configured by your email provider.
Verify DKIM record syntax including public key format and required parameters to ensure proper authentication.
DKIM signatures prevent email tampering and verify sender authenticity, improving your email reputation.
Cryptographic signatures for email integrity
When sending an email, your mail server adds a DKIM signature to the email header using a private key. This signature covers specific parts of the email content.
The receiving server extracts the selector and domain from the DKIM signature, then queries DNS for the public key at selector._domainkey.domain.com.
The receiving server uses the public key to verify the signature. If valid, the email is authenticated and more likely to reach the inbox.
Essential for email authentication and deliverability
DKIM signatures ensure email content hasn't been modified during transit. Any changes to signed headers or body content will cause verification to fail, protecting against man-in-the-middle attacks.
Email providers like Gmail and Outlook strongly favor emails with valid DKIM signatures. Proper DKIM configuration significantly improves inbox placement rates and sender reputation.
DKIM proves that emails were actually sent from your authorized servers, not from attackers attempting to impersonate your domain. This builds trust with both email providers and recipients.
DKIM is a critical component of DMARC (Domain-based Message Authentication, Reporting, and Conformance), which provides comprehensive email authentication and reporting.
Find your DKIM selector based on your email service
Google uses the selector google for DKIM signing.
DNS record: google._domainkey.yourdomain.com
Microsoft typically uses selector1 or selector2.
DNS record: selector1._domainkey.yourdomain.com
Many email providers use default or k1 as selectors.
DNS record: default._domainkey.yourdomain.com
Check your email provider's documentation or inspect email headers to find the s= value in DKIM-Signature.
Learn more about DKIM and email authentication
Complete guide to implementing SPF, DKIM, and DMARC for optimal email security.
Comprehensive guide to preventing your emails from being marked as spam.
Step-by-step guide to configuring all email authentication protocols including BIMI.
Complete email security with SPF and DKIM
Complete suite of free email tools
Everything you need to know about DKIM authentication
Need help with email authentication and deliverability? Mailwarm helps you build sender reputation and ensure your emails reach the inbox.