Live Tool

DKIM Lookup

Check one explicit DKIM selector for a domain, review whether a usable public key is published, and understand the selector result before diving into raw DNS detail.

Enter a domain and selector to begin a DKIM lookup.
This checks the DNS record for the selector you enter. It does not verify a specific email message's DKIM signature.

Enter the domain only. Do not include https://, a path, or an email address.

Enter only the label before ._domainkey. For selector1._domainkey.example.com, the selector is selector1.

Don't know the selector?

How this lookup works

DKIM selectors publish public keys under selector._domainkey.domain so receiving mail systems can verify authorised signing.

What it checks

  • Whether the exact selector returns a DKIM TXT record.
  • Whether the returned record looks usable within MailOps's current DKIM scope.
  • Whether DNS failed, the selector was missing, or the published record was unusable.

What verification means

  • Verifying here checks the selector's DNS record only.
  • It does not prove that the original email signature was valid.
  • It does not prove current signing activity, alignment, or provider ownership.

Selector format

  • Enter the selector label only, such as selector1.
  • For selector1._domainkey.example.com, the selector is selector1.
  • Do not enter the full DKIM DNS hostname or dotted selectors.

What it cannot prove

  • It does not discover other selectors automatically.
  • It does not prove that all outbound mail is currently DKIM-signed.
  • It does not prove DMARC alignment or provider ownership from DNS alone.

Give feedback

Help us improve MailOps without leaving this page.

10–4000 characters

Only provide this if you would like a response.