DKIM analyzer
Look up a domain’s DKIM record.
Your input is processed by this site to return the result. Avoid entering sensitive information.
What does this tool do?
DomainKeys Identified Mail (DKIM) signs selected message content, allowing receivers to verify the signature using a public key in DNS.
Why is it useful?
DKIM can help receivers verify signing-domain identity and detect changes to signed message content; it also supports DMARC alignment.
How to use it
- Find the DKIM selector used by your email provider.
- Enter the domain and selector to inspect the public DNS record.
- Send a test message and inspect authentication results to verify actual signing.
What the result can and cannot tell you
Finding a public key does not establish that every message is signed or that signatures pass. Changes to signed content can invalidate a signature.
Sender requirements and compliance
Mailbox providers have their own rules, which may depend on sending volume and recipient type. For example, Gmail's requirements for bulk senders to personal Gmail accounts include SPF, DKIM and DMARC. Consult the current provider guidance and test your actual messages; a record lookup alone is not a compliance assessment.