hashetools Logo

DKIM Lookup

Our DKIM Lookup tool instantly verifies your domain’s DKIM selector, public key, and DNS configuration, helping protect your emails from spoofing and delivery issues.

About DKIM Lookup

DKIM Lookup - Free DKIM Record Checker & Validator Tool

Easily check and validate your domain’s DKIM (DomainKeys Identified Mail) record with our free DKIM Lookup tool. Instantly verify your DKIM selector, public key, and DNS configuration to ensure your emails are properly authenticated and protected from spoofing or tampering.

What Is DKIM?

DKIM (DomainKeys Identified Mail) is an email authentication method that adds a digital signature to every outgoing email.
It helps email providers verify that a message actually came from your domain and hasn’t been altered during transit.

Here’s how it works:

  • Your mail server signs each outgoing email with a private key.
  • The recipient’s server verifies it using your public key stored in your DNS as a TXT record.
  • If the signature matches, the email is considered authentic and trustworthy.

When configured correctly, DKIM improves deliverability and prevents your domain from being used for phishing or spam.

What Is a DKIM Record?

DKIM record is a TXT entry added to your domain’s DNS.
It includes a selector (a unique label) and a public key used for email signature verification.

Example DKIM Record:

mail._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSq...AB"

DKIM Record Tags Explained

TagDescription
vVersion of DKIM (always “DKIM1”).
kKey type (commonly “rsa”).
pPublic key used to verify your email signature.
tOptional flags for testing or restrictions.
sService type (usually “email”).
nNotes or comments for administrators.

Why Use the DKIM Lookup Tool?

Our DKIM Lookup helps you:

  • Verify DKIM Record Syntax: Check for missing tags or invalid public keys.
  • Validate DKIM Selector: Ensure the correct selector is used for your domain.
  • Confirm Email Authentication: Detect issues affecting your email deliverability.
  • Troubleshoot DKIM Failures: Identify broken or misconfigured DKIM DNS records.
  • Boost Email Reputation: Improve trust with Gmail, Yahoo, and Outlook by signing messages properly.

How to Use the DKIM Lookup Tool

Follow these quick steps to validate your DKIM record:

  1. Enter your domain name (e.g., example.com)
  2. Enter your DKIM selector (e.g., mail or default)
  3. Click the “Lookup DKIM” button
  4. The tool fetches and displays your DKIM TXT record details, version, key type, public key, and policy information.

If no record is found, you’ll know that DKIM isn’t properly configured or hasn’t propagated yet.

How DKIM Lookup Works (Technical Overview)

When you run a DKIM lookup:

  1. The tool queries your DNS for a TXT record at selector._domainkey.yourdomain.com.
  2. It retrieves the public key associated with your domain.
  3. The system analyzes syntax, key validity, and record visibility.
  4. You get a detailed report showing whether your DKIM configuration is correct and ready for use.

Common DKIM Issues and Fixes

ProblemDescriptionFix
Missing DKIM RecordNo record found for selector.Publish a valid DKIM TXT record in your DNS.
Invalid Public KeyTruncated or improperly formatted key.Regenerate your key and update DNS.
Selector MismatchIncorrect selector value in mail header.Match selector between mail server and the DNS.
DNS Propagation DelayNew record not visible yet.Wait up to 24 hours for a full DNS update.

How to Check DKIM via Command Line

You can also manually verify your DKIM record using command-line tools:

Using nslookup (Windows):

nslookup -type=TXT mail._domainkey.example.com

Using dig (Linux/macOS):

dig TXT mail._domainkey.example.com

Both commands should return your DKIM record, showing v=DKIM1 and your public key.

How DKIM, SPF, and DMARC Work Together

These three protocols form the foundation of email authentication:

ProtocolPurpose
SPF (Sender Policy Framework)Defines which mail servers can send email for your domain.
DKIM (DomainKeys Identified Mail)Digitally signs outgoing emails to verify authenticity.
DMARC (Domain-based Message Authentication, Reporting & Conformance)Uses SPF and DKIM results to define how unauthorized emails should be handled.

Implementing all three significantly improves your domain’s email security and deliverability.

Best Practices for DKIM Setup

  • Use 2048-bit keys for stronger encryption.
  • Rotate keys regularly to prevent compromise.
  • Maintain consistent selector naming conventions (e.g., default, mail, google).
  • Re-test DKIM after every DNS or mail server update.
  • Combine with SPF and DMARC for complete protection.

Start Your DKIM Check Today

Implementing DKIM is essential for protecting your email identity and ensuring message integrity.

Use our Free DKIM Lookup Tool to quickly verify your DKIM setup, detect configuration issues, and enhance your domain’s email reputation.

Start your DKIM check now and secure your email communication today.

More Tools

Frequently Asked Questions About DKIM Lookup

Q1: What does DKIM stand for?

DKIM stands for DomainKeys Identified Mail, a protocol that verifies an email’s authenticity using cryptographic signatures.

Q2: How do I find my DKIM selector?

You can check your email headers (look for s= in the DKIM-Signature field) or contact your email service provider.

Q3: Can I have multiple DKIM records?

Yes, you can. Each record should use a different selector to identify unique mail systems or keys.

Q4: What happens if there’s no DKIM record?

Without a valid DKIM record, your emails may be marked as spam or rejected by recipient servers.

Q5: How often should I check my DKIM record?

At least once every few months or after changing email servers or DNS providers.