Record presence
Whether the specified selector has a reachable DKIM DNS record.
Free email security tool
Free DKIM Checker
Check whether a domain publishes a DKIM record for a specific selector and identify missing or invalid configuration.
DKIM records are selector-specific. Enter the domain and selector used by your email provider to check the corresponding DNS record.
What is DKIM?
DKIM uses a selector-specific public DNS record to help receiving email systems evaluate a signed message. The DNS record is one part of email authentication, alongside SPF and DMARC.
What is a DKIM selector?
A selector identifies the DKIM record your email provider uses. The same domain can have more than one selector, especially while keys are rotated.
What does the CloudSpex DKIM checker test?
Record interpretation
Whether the record can be safely interpreted as a DKIM key record.
Key state
Whether the key is present, revoked, missing or uses a recognized type.
CloudSpex checks the DKIM DNS record for the domain and selector you provide. It does not automatically discover every selector or verify a DKIM signature from an email message.
How to find your DKIM selector
Check your email provider setup documentation or DNS configuration. A sent message’s Authentication-Results or DKIM-Signature header can also identify the selector; do not upload email messages here.
Common DKIM problems
Common issues include a wrong selector, a missing DNS record, malformed configuration, a missing or revoked public key, and DNS propagation or availability problems.
DKIM check vs email security check
DKIM Checker
Checks one selector-specific DKIM DNS record.
Email Security Check
Reviews SPF, DKIM and DMARC together as a broader public summary.
DKIM check vs continuous monitoring
One-time check
Shows the current public DNS result for the selector you enter.
Continuous monitoring
Helps detect DKIM, SPF and DMARC configuration changes after provider, DNS or key-rotation work.
Frequently asked questions
What is a DKIM record?
A DKIM record is a public DNS record that contains the public key information used with DKIM email signing for a specific selector.
What is a DKIM selector?
A DKIM selector is the label chosen by an email provider or administrator to identify one DKIM record, such as google._domainkey.example.com.
What does the CloudSpex DKIM checker test?
CloudSpex checks the DKIM DNS record for the domain and selector you provide and reports whether the record can be safely interpreted.
How do I find my DKIM selector?
Check your email provider setup instructions, DNS configuration, or the Authentication-Results or DKIM-Signature header of a sent message. Do not upload email messages to this checker.
What happens if the DKIM record is missing?
A missing record can prevent receivers from finding the public key for that selector. Verify the selector and publish the expected DKIM record before checking again.
Can a domain have more than one DKIM selector?
Yes. A domain can use multiple selectors, for example during key rotation. This checker evaluates only the single selector you enter.
Does this checker verify an email signature?
No. This checker validates the DNS record for the selector you provide. It does not verify the DKIM signature of an email message.
Does the checker make changes to DNS?
No. CloudSpex reads the public DKIM DNS record only and does not change DNS, email settings or domain configuration.
DKIM records can break after provider, DNS or key-rotation changes.
Add your domain to CloudSpex to monitor DKIM, SPF, DMARC and related email-security configuration changes.
Start Monitoring FreeCheck Another Selector