DKIM Check
Check a DKIM record for a domain + selector — runs entirely in your browser via DNS-over-HTTPS.
Check nowHow it works
Enter domain + selector
Selector is in the DKIM-Signature header.
Look up
<selector>._domainkey.<domain>
Check the key
Present, revoked, or missing.
Benefits
Good to know about this tool
Looks up the public DKIM key for a domain+selector combination and checks if it's present and valid.
DKIM cryptographically signs outgoing email — without a valid public key in DNS, recipients can't verify the signature, hurting deliverability.
- Confirm the DKIM record after setting up an email provider
- Diagnose deliverability issues
- Check whether an old selector was properly revoked
- Use the exact selector name from your email provider, don't guess
- Revoke old selectors after a provider switch instead of deleting them
Frequently Asked Questions
Where do I find my selector?
The selector is usually in a received email's 'DKIM-Signature: ... s=...' header, or your email provider's docs. Common values to try:
What does a revoked key mean?
DKIM key revoked (empty p=) — this selector is no longer used for signing.
The information, templates, scripts, calculations and recommendations provided are intended for educational and assistance purposes only. Always review and test any generated result before production use. IT Smart Service accepts no liability for misuse, data loss, outages, security incidents, or legal, financial or technical damages arising from incorrect or improper use. Responsibility for validation, testing and deployment decisions rests with the user.
Network problems? We come on-site in Magdeburg and the surrounding area.
Learn more →Need professional IT support?
Our team can help if the free tool is not enough for your project.