DKIM Lookup
Our DKIM Lookup tool instantly verifies your domain’s DKIM selector, public key, and DNS configuration, helping protect your emails from spoofing and delivery issues.
About DKIM Lookup
DKIM Lookup - Free DKIM Record Checker & Validator Tool
Easily check and validate your domain’s DKIM (DomainKeys Identified Mail) record with our free DKIM Lookup tool. Instantly verify your DKIM selector, public key, and DNS configuration to ensure your emails are properly authenticated and protected from spoofing or tampering.
What Is DKIM?
DKIM (DomainKeys Identified Mail) is an email authentication method that adds a digital signature to every outgoing email.
It helps email providers verify that a message actually came from your domain and hasn’t been altered during transit.
Here’s how it works:
- Your mail server signs each outgoing email with a private key.
- The recipient’s server verifies it using your public key stored in your DNS as a TXT record.
- If the signature matches, the email is considered authentic and trustworthy.
When configured correctly, DKIM improves deliverability and prevents your domain from being used for phishing or spam.
What Is a DKIM Record?
A DKIM record is a TXT entry added to your domain’s DNS.
It includes a selector (a unique label) and a public key used for email signature verification.
Example DKIM Record:
mail._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSq...AB"
DKIM Record Tags Explained
| Tag | Description |
| v | Version of DKIM (always “DKIM1”). |
| k | Key type (commonly “rsa”). |
| p | Public key used to verify your email signature. |
| t | Optional flags for testing or restrictions. |
| s | Service type (usually “email”). |
| n | Notes or comments for administrators. |
Why Use the DKIM Lookup Tool?
Our DKIM Lookup helps you:
- Verify DKIM Record Syntax: Check for missing tags or invalid public keys.
- Validate DKIM Selector: Ensure the correct selector is used for your domain.
- Confirm Email Authentication: Detect issues affecting your email deliverability.
- Troubleshoot DKIM Failures: Identify broken or misconfigured DKIM DNS records.
- Boost Email Reputation: Improve trust with Gmail, Yahoo, and Outlook by signing messages properly.
How to Use the DKIM Lookup Tool
Follow these quick steps to validate your DKIM record:
- Enter your domain name (e.g., example.com)
- Enter your DKIM selector (e.g., mail or default)
- Click the “Lookup DKIM” button
- The tool fetches and displays your DKIM TXT record details, version, key type, public key, and policy information.
If no record is found, you’ll know that DKIM isn’t properly configured or hasn’t propagated yet.
How DKIM Lookup Works (Technical Overview)
When you run a DKIM lookup:
- The tool queries your DNS for a TXT record at selector._domainkey.yourdomain.com.
- It retrieves the public key associated with your domain.
- The system analyzes syntax, key validity, and record visibility.
- You get a detailed report showing whether your DKIM configuration is correct and ready for use.
Common DKIM Issues and Fixes
| Problem | Description | Fix |
| Missing DKIM Record | No record found for selector. | Publish a valid DKIM TXT record in your DNS. |
| Invalid Public Key | Truncated or improperly formatted key. | Regenerate your key and update DNS. |
| Selector Mismatch | Incorrect selector value in mail header. | Match selector between mail server and the DNS. |
| DNS Propagation Delay | New record not visible yet. | Wait up to 24 hours for a full DNS update. |
How to Check DKIM via Command Line
You can also manually verify your DKIM record using command-line tools:
Using nslookup (Windows):
nslookup -type=TXT mail._domainkey.example.com
Using dig (Linux/macOS):
dig TXT mail._domainkey.example.com
Both commands should return your DKIM record, showing v=DKIM1 and your public key.
How DKIM, SPF, and DMARC Work Together
These three protocols form the foundation of email authentication:
| Protocol | Purpose |
| SPF (Sender Policy Framework) | Defines which mail servers can send email for your domain. |
| DKIM (DomainKeys Identified Mail) | Digitally signs outgoing emails to verify authenticity. |
| DMARC (Domain-based Message Authentication, Reporting & Conformance) | Uses SPF and DKIM results to define how unauthorized emails should be handled. |
Implementing all three significantly improves your domain’s email security and deliverability.
Best Practices for DKIM Setup
- Use 2048-bit keys for stronger encryption.
- Rotate keys regularly to prevent compromise.
- Maintain consistent selector naming conventions (e.g., default, mail, google).
- Re-test DKIM after every DNS or mail server update.
- Combine with SPF and DMARC for complete protection.
Start Your DKIM Check Today
Implementing DKIM is essential for protecting your email identity and ensuring message integrity.
Use our Free DKIM Lookup Tool to quickly verify your DKIM setup, detect configuration issues, and enhance your domain’s email reputation.
Start your DKIM check now and secure your email communication today.
More Tools
Frequently Asked Questions About DKIM Lookup
Q1: What does DKIM stand for?
DKIM stands for DomainKeys Identified Mail, a protocol that verifies an email’s authenticity using cryptographic signatures.
Q2: How do I find my DKIM selector?
You can check your email headers (look for s= in the DKIM-Signature field) or contact your email service provider.
Q3: Can I have multiple DKIM records?
Yes, you can. Each record should use a different selector to identify unique mail systems or keys.
Q4: What happens if there’s no DKIM record?
Without a valid DKIM record, your emails may be marked as spam or rejected by recipient servers.
Q5: How often should I check my DKIM record?
At least once every few months or after changing email servers or DNS providers.