DKIM Checker Tool

Verify DKIM signatures and email authentication

DKIM Record Validation
Enter a domain and selector to check and validate the DKIM public key configuration

Common selectors to try:

What is DKIM (DomainKeys Identified Mail)?

DKIM (DomainKeys Identified Mail) is an email authentication method that uses cryptographic signatures to verify that an email message hasn't been tampered with during transit and that it was indeed sent by an authorized mail server for the domain.

How DKIM Works:

  1. Your mail server generates a cryptographic signature for each outgoing email
  2. The signature is created using a private key and added to the email headers
  3. You publish the corresponding public key in your DNS records
  4. Receiving mail servers use the public key to verify the signature
  5. If the signature is valid, the email is considered authentic and unmodified

DKIM Record Components:

  • Selector: A unique identifier for the DKIM key (e.g., "default", "google")
  • Domain: The domain that owns the DKIM key
  • Public Key: The cryptographic public key used for signature verification
  • Key Type: The algorithm used (typically RSA)
  • Version: DKIM version (always "DKIM1")

Benefits of DKIM:

  • Prevents email tampering and ensures message integrity
  • Helps establish sender authenticity and reputation
  • Improves email deliverability and reduces spam classification
  • Required component for DMARC implementation
  • Provides non-repudiation for sent emails