DKIM Record Lookup

Introducing Our DKIM Lookup

Our online DKIM record checker tool helps you check DKIM records for any domain. You can enter the domain name (along with a DKIM selector) and run the process. Our tool will show you whether the particular domain has DKIM records configured for it or not.

The benefit of using our DKIM check tool for validating DKIM records is ensuring email safety. These records contain public keys that are used to authenticate email messages. With DKIM records in place, your email client can make sure that the received messages have not been maliciously tampered with.

How to Use Our DKIM Record Checker

Here is how you can use our DKIM record check tool.

• To get started, open our DKIM record checker tool.
• Enter the DKIM selector into the provided field. (Find an explanation on DKIM selectors below.)
• Enter the domain name into the provided field.
• Click on the “Lookup DKIM” button to start the validation process.

Once the process finishes, you can scroll down to view the results.

Understanding the DKIM Selector

To use our DKIM tester tool, you have to enter the DKIM selector along with the domain name.

The DKIM selector is used to specify a public key stored within the DKIM record. It is included in the record, i.e., under the name area. For example, a DKIM record can be written as follows:

mail2024._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSq...AB"

In this case, the “mail2024” part is the selector. It points to the public key stored under the “p=” space.

How Do You Find the Selector for a DKIM Record?

Here is how you can find the selector to input in our DKIM record lookup:

• If you have access to the DNS records of the domain, you can simply open the TXT records and find the DKIM record. In this case, our tool can help you validate the DKIM record and see if it is properly configured instead of determining its existence.
• On the other hand, if you don’t have access to the DNS records of the domain but have instead just received an email from it, you can view the original source code of the email to find the selector. In Gmail, for example, you can open an email message, click on the three dots at the top right corner, and click on the “Show Original” button. Once the original source code for the email opens, Look for the “dkim-signature” field in the headers. The selector is mentioned in the “s=” tag.

What Information Does Our DKIM Tester Provide?

Here is a list of the different details that you can get with our DKIM record lookup:

• DNS record: This part shows the complete DNS record in the 12345678._domainkey.example.com  format.
• Selector: This part shows the selector specified by the user.
• Domain: This shows the domain specified by the user.
• Declared tags and their values: This part shows the various tags present in the DKIM record along with their values. Here you will find the values of tags such as the “p,” “V,” and “K” tags.
• Key length: This part indicates the length of the public key in bits.

Understanding Default Tags in DKIM

Q:        -         Specifies query methods, usually 'dns'.

T:         -         Lists flags modifying selector interpretation.

G:        *         Restricts signing authority to specific groups.

S:         *          Defines applicable service types, like 'email'.

N:        -         Notes for human reference.

L:         0          Sets body length limits, posing security risks.

H:        -         Specifies hash algorithms like 'sha1' or 'sha256'

Why You Need to Regularly Check DKIM Records

The purpose of checking DKIM records is to ensure that emails are delivered safely and securely from sender to recipient. They help to make sure that the message is not tampered with while it is in transit. The process includes creating signatures using the email’s contents, which are then matched with the public key stored in the DKIM record.

Checking DKIM records regularly helps you ensure that this process is carried out properly when you’re receiving or sending emails. You can check DKIM records of your own domain as well as the ones that you’re communicating with. If our DKIM record lookup indicates that the records are not configured properly and/or are invalid, it can indicate problems with safe email deliverability.

FAQs

What does DKIM stand for?

DKIM stands for Domain Keys Identified Mail. It is used in conjunction with SPF and DMARC to secure and authenticate email messages.

Can I use the DKIM checker without the selector?

Our DKIM checker requires you to enter the selector and the domain before starting the process. Without the selector, our tool won’t be able to find the record.

What happens if there is no DKIM record?

If there is no DKIM record set up for a domain, then the messages sent from it won’t be able to get verified and authenticated. This could create problems in email deliverability and security. There would be no way of knowing if the email had been intercepted in transit and maliciously altered.