DKIM Record Checker
DKIM signs outgoing emails. Receivers verify the signature using a public key in DNS.
DKIM lives on <selector>._domainkey.<domain>. If selector is empty, we try common ones.
Result for townandcountryhamptons.com
Found
Selector: selector1
(TXT on selector1._domainkey.townandcountryhamptons.com)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA740+ui5GSlU+wvjdZ8o8gekk2ufqjXDjAQWprwuu5WFpO76WWBIuZvlthnVEu/ybXUGks7GnpgGajPsgTFsmOu1inKw01TwisLa9CZreqexWLM6JPXBd4YxKNf459v1NDAdiZv6wmdNGqiK71OUwqkIOtOuBsCDWTJs3QMB3eP2LolAuhFpPRlpWAjf6637/6AKnD/XWP7JUwFfE+OVNY63DvwRGW/B9O+BgaqyU8ntDm2IT6j6qPPcGHGo6pxBPBy22l0Lv4ePgOVU8Xo55ufculKPit8TfjILQQ0+m90fbVRf2WZvXW823OtcSGcGvwJ2U94CU1iX2gI+ObXzV6QIDAQAB;
Selector: selector2
(TXT on selector2._domainkey.townandcountryhamptons.com)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFjgLiFKSulZ3bXru4LVgBhNN59MuPRxT4OesI9v0NehyRcsV8NQJkL+I0DFg5+0UVeoy1SMJZQjLNrwWKZuQ0UEnW7Ep7OllPapeMykMx4xCpEw1pO7wxdPLrS/FEyhyi2JXOZJnzyk+ZUYf565g2kb6+113mldrcSE4InQ6t1NMTY9ptoZymr8Ku60RqWcM/lvoWeUcGT4cFZjJEMUl15mT+v2YCFOAFa/xBHSKb0+vUhLV7NcMl6GRoLqLfM4Lr25zY8YmSqS+pv0eXs/BVCkloyNN1u/9exyXlXZistjWFchTlqQdKOowSFXD2kuHYb+2mV9v3C13ulF9cPJgQIDAQAB;
FAQ
Why does DKIM require a selector?
Selectors allow rotating keys and running multiple keys per domain.
Where is DKIM published?
TXT on <selector>._domainkey.<domain>.
DKIM record exists but emails still fail DKIM?
Signing may be disabled or the selector used in email differs from DNS.
Do I need DKIM if I have SPF?
Yes, many providers use both for best deliverability and DMARC alignment.
Can I have multiple DKIM selectors?
Yes, that is common for key rotation or multiple senders.
What is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing emails. DNS stores a public key that allows receivers to verify authenticity.
Example
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0B...
Common mistakes
- Wrong selector (the record exists but under a different selector).
- Key is split incorrectly across multiple TXT chunks (some DNS UIs break it).
- Publishing DKIM but not enabling signing on the mail provider.