Web Toolarium

DKIM SELECTOR CHECK

Check whether DKIM is configured for a domain

Enter a domain and selector to check for a DKIM public key in DNS. Leave the selector blank to search common candidates.

CHECK A RECORD

Check a domain’s DKIM settings

Check the DKIM public key published in the domain’s DNS.

For URLs, the hostname is used. localhost, private IPs, and URLs with credentials cannot be checked.

Examples: selector1 / google / k1. If entered, only that selector is checked.

HOW IT WORKS

Check a domain’s DKIM settings in DNS.

01

DNS name checked

Checks the TXT at <selector>._domainkey.<domain>. The domain is not changed to a parent domain.

02

Search common candidates

With a blank selector, checks default, selector1, selector2, google, k1, s1, s2, mail, and dkim. DNS cannot list selectors, so this is not exhaustive.

03

Direct browser lookup

Uses the Google Public DNS JSON API. This site does not store inputs or DNS responses.

USAGE & FAQ

How to use and FAQ

Check whether a DKIM public key is published in DNS. Email delivery and private keys are not tested.

01

Enter a domain or URL

Enter example.com or a URL. For URLs, the hostname is checked.

02

Enter a selector (optional)

Enter it if known. If blank, nine common candidates are checked.

03

Review DKIM results

Review TXT, DKIM format, p= public key, k= key type, and CNAME delegation.

Q1. What can this tool check?

Checks the TXT at <selector>._domainkey.<domain> and shows v=DKIM1 and the p= public key.

Q2. What should I enter as the domain?

Enter a domain or URL. Its hostname is used without changing it to a parent domain.

Q3. What if the selector is blank?

Nine common candidates are checked, but not every selector.

Q4. What is checked when specified?

Only the TXT at <selector>._domainkey.<domain> is checked.

Q5. What if no candidate is found?

No record was found among those candidates. The actual selector may not be included.

Q6. Can CNAME delegation be checked?

Yes. The CNAME target’s TXT is checked and shown if it contains a DKIM key.

Q7. What do v=DKIM1, p=, k=, t= mean?

v= is the version, p= the public key, k= the key type, and t= a flag. Omitted k= defaults to rsa.

Q8. Can it verify email signatures?

No. It checks DNS public keys, not message content or recipient authentication.

Q9. Why can DNS not be checked?

Possible causes include NXDOMAIN, SERVFAIL, timeout, or network/API errors. Retry or check DNS settings.

Q10. Are inputs or DNS responses stored?

This site does not store them. The browser queries the Google Public DNS JSON API.