Free DKIM checker
DKIM adds a digital signature to your emails, so inboxes can check they really came from your domain. We'll look for a public DKIM key under the usual names. This is a passive DNS look-up, for information only. DKIM helps stop spoofing, but it doesn't stop it on its own.
What this checks
This is a passive, light-touch check. It only reads what a normal browser visit and public DNS can see. It isn't a security test, a penetration test or a guarantee.
Check a site
Checking your site… This usually takes under a minute.
What your result means
- Pass: We found a DKIM signature key for your domain.
- Worth a look: We couldn't find one under the usual names. You may still have one under a name we didn't check, so ask your email provider.
- How to fix: Turn on DKIM signing in your email provider's settings, and add the record they give you at your domain provider.
FAQs
What is a selector?
A short name your email provider chooses (for example `google` or `s1`). The DNS record lives at `selector._domainkey.yourdomain`.
Why might you miss a real key?
Providers sometimes use uncommon selector names. If we don't find one, ask your provider for the exact record.
Does DKIM stop fake emails by itself?
No. It helps, especially with SPF and DMARC.
Will this check ever say Needs fixing?
No. Because we can't be sure a key is missing, this check never fails.