A selector locates the public key
DKIM signing systems choose a selector and publish the corresponding public key at <selector>._domainkey.<domain>. The selector is usually provided by the mail platform.
← All public tools
Free public checker
DKIM inspector
Look up a DKIM selector record and inspect its public key and associated findings.
Your result will appear here.
Run the check to see structured findings, severity, evidence and next steps from the public diagnostics API.
The details
A selector locates the public key
DNS publication does not enable signing
A valid DNS key lets receivers verify signatures only when the sending system signs messages with the matching private key. Publishing a record alone does not configure a mail platform to sign.
A result is a point-in-time check
DNS can vary by resolver and change over time. Verify important changes with your DNS provider and mail platform. Public DNS checks cannot see every private report or sending configuration.
Explore MailConfig ProFrequently asked questions
What does the DKIM inspector do?
Look up a DKIM selector record and inspect its public key and associated findings.
Do I need an account?
No. This public tool is available without registration.