Discover · Verify · Troubleshoot
DKIM Selector Finder
Find likely DKIM selectors and verify which published records are valid for your domain. Discover active selectors, check key details, and troubleshoot common DKIM configuration issues.
✓ Fast DNS lookup·✓ No sign-up required·✓ Public DNS analysis·✓ Free to use
DKIM Discovery Workspace
Find and verify likely DKIM selectors for your domain. Mailvovo checks common selector names and shows which published records are valid, need review, were not found, or could not be confirmed.
Selector summary
Discovery path
8 testedCommon selectors tested
Active selectors
Selector results
| Selector | Status | Key type | Key size | Notes |
|---|---|---|---|---|
| Valid | rsa | 2048-bit | Used by Google Workspace | |
| selector1 | Valid | rsa | 2048-bit | Common Microsoft 365 selector |
| selector2 | Not found | — | — | No DKIM record published |
| default | Not found | — | — | No DKIM record published |
| s1 | Review | rsa | 1024-bit | Older RSA key size — consider rotating to 2048-bit |
| Valid | rsa | 2048-bit | Active DKIM record | |
| dkim | Not found | — | — | No DKIM record published |
| k1 | Not found | — | — | No DKIM record published |
Top findings
A valid DKIM public key was found for selector1 with a 2048-bit RSA key.
No DKIM record was found for the default selector. A missing common selector does not prove DKIM is absent.
The google selector is valid and publishes a 2048-bit RSA key.
The s1 selector appears to use a 1024-bit RSA key. Consider rotating to 2048-bit where supported.
About This DKIM Selector Finder
Mailvovo checks a curated set of likely DKIM selector names and verifies which selectors publish DKIM public-key records in DNS. Use the results to identify active selectors, review key type and approximate key size, and troubleshoot common DKIM configuration issues.
What it checks
- Tests common DKIM selector names
- Verifies published DNS TXT records
- Checks DKIM key type and approximate size
- Identifies valid, review, missing, or unknown results
- Highlights testing and revoked keys
- Provides actionable configuration findings
Who it’s for
- Domain owners
- IT administrators
- Email administrators
- Deliverability teams
- Security teams
- Agencies and MSPs
Important to know
- Not all domains use standard selector names
- A missing selector does not always indicate an issue
- Multiple active selectors can be normal
- 2048-bit RSA keys are generally preferred
- DNS timeouts should be treated as Unknown
- This tool checks published records only
How It Works
Get your DKIM selector results in four simple steps.
- 1Enter Domain
Type in your domain name and start the lookup.
- 2Try Common Selectors
Mailvovo checks a curated list of likely DKIM selector names.
- 3Review Results
See which selectors are valid, missing, need review, or are unknown.
- 4Use in Setup
Use a confirmed selector when reviewing your email authentication configuration.
Frequently Asked Questions
A DKIM selector is the label used with _domainkey to locate a specific DKIM public-key record in DNS.
No. A valid DKIM public key confirms published DNS configuration only. It does not prove that a specific message was signed correctly or guarantee inbox placement.
Mailvovo tests a curated list of common selector names and checks whether each selector publishes a DKIM TXT record.
Yes. Domains commonly use multiple DKIM selectors for different providers, services, environments, or key rotation.
A selector may never have been used, may have been retired, may use a different name, or may not be publicly resolvable. A missing selector alone does not prove DKIM failure.
For RSA DKIM keys, 2048-bit keys are generally preferred where the DNS provider and sending platform support them.
Check Another Domain
Look up a different domain to find likely DKIM selectors and verify their DNS records.