Check whether DKIM is signing your mail.
DKIM signs your outgoing mail with a private key so receivers can confirm it wasn’t altered in transit. Selectors can’t be enumerated from DNS, so this check tries a set of common selector names — a miss means we couldn’t find a key under those names, not that DKIM is definitely missing. Paste up to 15 domains below, and see DKIM alongside 4 more checks.
Questions
DKIM Checker FAQ
Why didn’t the checker find my DKIM record?+
DKIM selectors are chosen by your mail provider and can’t be listed from DNS — we try nine common names. A miss means we didn’t find a key under those names, not that DKIM is absent.
What does a "revoked" DKIM key mean?+
A key published under a common selector but revoked is a record that exists but deliberately verifies nothing — often meaning the selector was retired, not that it’s currently signing your mail.
Does DKIM alone stop spoofing?+
No — DKIM only proves a message wasn’t altered; it doesn’t tell receivers what to do if a spoofed message fails. That’s DMARC’s job, checked on the same page below.