Verify · Validate · Troubleshoot
DKIM Checker
Check whether your DKIM selector is correctly published, validate the public-key record, and identify common configuration issues.
✓ Fast DNS lookup·✓ No sign-up required·✓ Validates key format·✓ Free to use
DKIM Lookup Result
Live DNS lookup and validation results for the selected DKIM selector.
DKIM record (TXT)
selector1._domainkey.example.comv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7SamplePublicKeyMaterialForPreviewOnly1234567890Parsed record details
Key analysis
Technical details
Query: selector1._domainkey.example.com. DNS queries used: 1.
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7SamplePublicKeyMaterialForPreviewOnly1234567890- v = DKIM1
- k = rsa
- p = [public key]
Version: Yes. Public key: Yes. Supported key type: Yes.
- Verify that the selector exactly matches your sending provider.
- An empty p= value indicates a revoked key.
- Review 1024-bit RSA keys and rotate to 2048-bit where supported.
- Use a real message header to verify actual DKIM signing and authentication results.
About This DKIM Checker
Mailvovo checks whether a specific DKIM selector is published in DNS, parses the public-key record, validates important DKIM tags, reviews key type and approximate key size, and highlights common configuration issues.
What it checks
- Looks up the DKIM TXT record
- Validates DKIM record structure
- Checks key type and approximate size
- Detects revoked and testing keys
- Reviews hash and service restrictions
- Provides actionable recommendations
Who it’s for
- Domain owners
- IT administrators
- Email administrators
- Deliverability teams
- Security teams
- Agencies and MSPs
Important to know
- DKIM records are selector-specific
- The selector must already be known
- A 2048-bit RSA key is generally preferred
- CNAME-based DKIM records are supported
- DNS evidence does not prove a message passed DKIM
- Use Email Header Analyzer to verify a real message
How It Works
Check your DKIM selector in four simple steps.
- 1Enter Domain & Selector
Type in your domain name and known DKIM selector.
- 2DNS Lookup
Mailvovo queries the selector's DKIM DNS record.
- 3Validate Record
The record is parsed and the public-key configuration is reviewed.
- 4Review Results
See validation results, key details, and recommendations.
Frequently Asked Questions
A DKIM DNS record publishes the public key used by receiving mail systems to verify DKIM signatures created by the corresponding private key.
DKIM records are selector-specific. The selector may be incorrect, retired, unpublished, delegated through another DNS name, or still propagating.
Check your sending provider configuration, inspect a DKIM-Signature header from a real message, or use Mailvovo's DKIM Selector Finder.
The DKIM Checker validates one known selector at a time. Use DKIM Selector Finder when you want to test multiple likely selector names.
For RSA DKIM keys, 2048-bit keys are generally preferred where supported. Ed25519 DKIM keys use a different key format.
There is no universal rotation interval. Follow your sending provider's recommendations and rotate keys when required by your security policy or after suspected key exposure.
Check Another DKIM Selector
Look up a different selector to verify its DKIM DNS record.