Specialist check
Free DKIM record checker
Look up a DKIM selector for a sending domain and see whether the public key exists before a cold email launch.
- Checks
- Checks the exact selector you provide for a DKIM TXT key or delegated CNAME.
- Cannot tell
- It cannot discover a private or undocumented selector reliably.
Expected time: about 5 to 20 seconds. Some public services can take longer.
Source: Live Google Public DNS for the exact selector entered.
Questions
A selector is the DNS label your mail provider uses to find the right DKIM key. The lookup happens at selector._domainkey.yourdomain. Common selectors include google, selector1, selector2, s1, and s2, but every provider can choose its own value.
DKIM signs outbound mail so receivers can verify the message was authorized by the domain. Without DKIM, DMARC alignment is weaker and Google or Microsoft may treat the campaign as higher risk.
Check your sending platform's domain authentication screen. Google Workspace commonly uses google, Microsoft often uses selector1 and selector2, and many outbound tools use s1 or s2. Unknown selector is different from failed DKIM, so test the selector your platform actually sends with.
Related checks