Skip to content
SendPath

Free tool

DKIM checker

Type a domain to look up its DKIM key: the signature that proves an email really came from it. The same check SendPath runs on every mailbox you connect.

One run checks SPF, DKIM, DMARC and MX together.

What it checks

What the DKIM check looks at

It must pass

A key is published
A TXT record at <selector>._domainkey with a public key in it.
The key isn't revoked
A record with an empty key (p=) means the key was withdrawn.

Where it looks

The usual selectors
The names most providers use by default: google, selector1, selector2, default, dkim, mail, k1, s1, s2, zmail, zoho and the other names big providers use by default.

FAQ

Questions, answered

What is a DKIM selector?+

The name your email provider publishes its key under, at <selector>._domainkey.yourdomain.com. Each provider picks its own: Google uses google, Microsoft 365 uses selector1 and selector2.

It says "Couldn't check", but I set up DKIM.+

Your provider may use a selector outside the usual names. If its DKIM settings say the key is published, it's fine. Once you connect a mailbox, SendPath checks the exact selector your mail is signed with.

Is the check stored anywhere?+

No. It looks up public DNS records and shows the answer. Nothing you type is saved.

Free tools

More free tools

Get started today.

Free for 14 days. No card needed.