alternate_emailFree · No sign-up

Free DKIM checker (plus SPF, DMARC and MX)

Enter your domain and we’ll find your DKIM record for you, no selector needed. We probe the selectors used by Google Workspace, Microsoft 365 and other popular providers automatically, then check your SPF, DMARC and MX too, so you can see whether your mail sends, receives and resists spoofing, with plain-English fixes for anything missing.

Know your DKIM selector? Add it (optional)

We already try the common ones automatically. Add yours only if you use a custom selector. It’s the bit before ._domainkey in your DKIM record.

lockWe only look up public DNS records for the domain you enter. Nothing is stored, and we never see your inbox or emails.

DKIM is the digital signature that proves an email genuinely came from you and hasn’t been tampered with in transit. It’s one of the biggest factors in whether your mail lands in the inbox or the spam folder, yet it’s the record small businesses most often get wrong or miss entirely. The catch with most DKIM checkers is that they ask for your selector first, the bit before ._domainkey in the record, and hardly anyone knows theirs off the top of their head.

This tool solves that. We automatically probe the DKIM selectors used by Google Workspace, Microsoft 365, Mailchimp and other common providers, so in most cases we find your record without you needing to know a thing. If you’re on a custom selector, you can pop it in the optional field and we’ll check that too.

While we’re in your DNS, we also check the records that work alongside DKIM: your MX records (so mail can actually arrive), SPF (which servers are allowed to send as you) and DMARC (what inbox providers should do when a message fails). Get all four right and scammers can’t spoof your address, and your genuine emails stop landing in spam. Every result comes with the specific fix, so you know exactly what to change or what to ask your provider for. If you’d rather have someone set it all up correctly, that’s exactly the sort of job our IT side handles.

IT & AI consultingarrow_forwardTest your website speedarrow_forwardWill AI recommend your business?arrow_forward

FAQ

Common questions

Can you check DKIM without knowing my selector?
Yes, that is the whole point of this tool. Most DKIM checkers make you enter your selector first, but we automatically probe the ones used by Google Workspace, Microsoft 365, Mailchimp and other popular providers, so in most cases we find your record without you needing to know a thing. If you are on a custom selector, pop it in the optional field and we will check that too.
What is a DKIM selector, and how do I find mine?
A DKIM selector is a short label that points to the right public key for your domain: it is the bit before ._domainkey in the record (for example google, selector1 or k1). You will usually find it in your email provider’s DNS or authentication settings, or in the DKIM-Signature header of an email you have sent (look for s=). If you are not sure, just run the check anyway, as we try the common ones for you.
What is DKIM, and why does it matter?
DKIM adds a tamper-proof digital signature to your emails that proves they genuinely came from you and were not altered in transit. It is one of the biggest factors in whether your mail reaches the inbox or the spam folder, and alongside SPF and DMARC it stops scammers spoofing your address.
Why does my email keep going to spam?
Missing or misconfigured DKIM, SPF and DMARC records are the most common cause. If inbox providers cannot verify that your email is genuinely from you, they treat it with suspicion. This checker shows which records are missing and how to fix them.
Does the checker also cover SPF, DMARC and MX?
Yes. As well as DKIM, we check your MX records (so mail can arrive), SPF (which servers are allowed to send as you) and DMARC (what inbox providers should do when a message fails). A healthy setup has all four, with DMARC set to at least p=quarantine, ideally p=reject once you are confident.
Is the DKIM checker free and safe to use?
Yes. It only reads public DNS records for the domain you enter, the same information any mail server can see. Nothing is changed, there is no sign-up, and we never see your inbox or emails.
chat