DKIM Record Checker (Advanced)
This DKIM Record Checker verifies your domain’s DKIM public key, detects key length, and evaluates email authentication strength.
About This Tool
DKIM (DomainKeys Identified Mail) is an email authentication method that uses cryptographic signatures to verify that an email was authorized by the domain owner.
This tool helps you:
- Check if a DKIM record exists for a specific selector
- Validate the DKIM public key
- Detect key length (1024-bit vs 2048-bit)
- Evaluate DKIM strength and security level
- Identify weak or outdated configurations
For full email authentication, DKIM should be properly configured along with SPF and DMARC.
Frequently Asked Questions
What is a DKIM record?
DKIM (DomainKeys Identified Mail) is an email authentication method that adds a digital signature to outgoing emails. It allows receiving mail servers to verify that the message was not altered in transit and genuinely came from the authorized domain.
What is a DKIM selector?
A DKIM selector is a unique identifier that helps locate the correct public key in DNS. The full DNS record format is:
selector._domainkey.yourdomain.com
Different email providers use different selectors such as default, s1, selector1, or custom names.
What is a good DKIM key length?
2048-bit → Recommended (Strong)
1024-bit → Acceptable but outdated
Below 1024-bit → Weak and not recommended
Modern security standards recommend 2048-bit keys.
Why does my domain not show a DKIM record?
Possible reasons:
DKIM is not enabled in your email provider
The selector is different
DNS has not propagated yet
DNS record is misconfigured
Does DKIM alone prevent email spoofing?
No. DKIM should be used together with:
SPF
DMARC
All three together provide strong email authentication protection.
What does SHA-256 mean in DKIM?
SHA-256 is the hashing algorithm used to sign the email. It is secure and recommended. Older SHA-1 is considered weak and should not be used.
