DKIM Record Checker
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your outgoing emails, allowing receiving servers to verify the message hasn't been tampered with in transit. A missing or invalid DKIM key causes emails to fail authentication checks and increases the likelihood of landing in spam. Enter a domain to discover and validate its DKIM keys.
What does this check?
- Auto-discovery of common DKIM selectors for your domain
- Whether DKIM public keys are correctly published in DNS
- Key length — 2048-bit RSA or Ed25519 is recommended
- Key flags, validity, and revocation status
- Weak or outdated 1024-bit keys that should be rotated