DKIM Record Checker
Look up a domain's DKIM public key by selector. Confirm the key is published, see its type and flags, and catch a revoked or testing key.
The selector is the s= value in a signed email's DKIM-Signature header. Common ones: google, selector1, k1, default.
What a DKIM record does
DKIM publishes a public key as a TXT record at selector._domainkey.yourdomain.com. Your mail provider signs outgoing email with the matching private key, and receiving servers use this public key to verify the signature.
Because the key lives under a selector, you have to know the selector to look it up. For the full explanation, read what is a DKIM record.
Finding your selector
Open a message you sent, view the original or raw headers, and find the DKIM-Signature line. The s= value is the selector, and d= is the domain.
A revoked key shows an empty p=, and a key still in setup often carries a t=y testing flag. This checker flags both.