DKIM Record Checker
DKIM signs outgoing emails. Receivers verify the signature using a public key in DNS.
DKIM lives on <selector>._domainkey.<domain>. If selector is empty, we try common ones.
Result for hilton.com
Found
Selector: selector1
(TXT on selector1._domainkey.hilton.com)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIR5SLtVvsU2c46scwrUfpW25/h9Zl0Ms3ctvwnniLXYM2lvx0Zpzb6W6tAhNhZKPQRElLRJEar80iH7P00FZCwofoTJgkJe6RpKfeUFZj85NF5yO8BRd3jo0kM9bbgIf80C+yjc4IrzhL9D8FxeFOdEail0Uvr00m+bPTpZlcVyyhv3WdrwrdiKO0U+IZlp0F9lghUOSnfrSiFPGxeuCnCcHR3ziUsqrbuMIfeMe8X36tX6G3+1+WkQ+SRM5jSBaYdBe+FrBbjenPUzEhteZa36OwesES2Z9tMO6dxbXfvJSQDxtgBo4FvIOPC+R65j9ZGEb7uXNe3tcM4ehyrpwQIDAQAB;
Selector: selector2
(TXT on selector2._domainkey.hilton.com)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HyV4quK+pVQ9CrhVLe2exw57roys+9kyFtQTHcF8UtoqBhnuZNzDshzx5EVC/dijSFMi/SVu1DG5XmiI/Q2AYb4Xfu0Y/AJ9s7YGonk3p9Xo8T8so78PKj7q4kF88xfcqIrkGQCp5IvcVeiz5P+uF32Vv1xcbAN0GXCivcpq2aWxJBURqPEjHiruwp7ohy3zCmR3TIgnHK1Oi0eIsDFrAayRNBFHa2W83NMJbKM/6YBWxtIJSAK+/K7mRIG1o+ldVd/uazmKHDwW0dd6b1gX9kOytA0e2alCSH9c98qsojkSq3HtJzZrBUVQXbK1CJVA2UnJDKedKaTM8qP60vaPQIDAQAB;
FAQ
Why does DKIM require a selector?
Selectors allow rotating keys and running multiple keys per domain.
Where is DKIM published?
TXT on <selector>._domainkey.<domain>.
DKIM record exists but emails still fail DKIM?
Signing may be disabled or the selector used in email differs from DNS.
Do I need DKIM if I have SPF?
Yes, many providers use both for best deliverability and DMARC alignment.
Can I have multiple DKIM selectors?
Yes, that is common for key rotation or multiple senders.
What is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing emails. DNS stores a public key that allows receivers to verify authenticity.
Example
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0B...
Common mistakes
- Wrong selector (the record exists but under a different selector).
- Key is split incorrectly across multiple TXT chunks (some DNS UIs break it).
- Publishing DKIM but not enabling signing on the mail provider.