DKIM Record Checker

DKIM signs outgoing emails. Receivers verify the signature using a public key in DNS.

DKIM lives on <selector>._domainkey.<domain>. If selector is empty, we try common ones.

Result for tradecircle.biz

Found
Selector: selector1 (TXT on selector1._domainkey.tradecircle.biz)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1hhdAmWk8CP7wSFjrU6nVgxfqES936YdjkWUkpEIUH1rhsMuwFAmlADluFgiYSyoKNzQk/ntm9/yz8r8eOggxmX6wAGpyyzkQcbhZTXtYgEbB0trt9BfK1Mufnl3/SptsfvPHx78QjeHgd2u7UXPPXhj8nSq9HupHwSuW9TagiegvSJiJd2cF77yqJG9O/zptr7oFsAxVk8gThPQBymQvEosKaHTf7IQDRRvbRKAibrv0Pt/P/THFVfwaacc6vp7BsfwXY27p/wGCZlT2Hm4x6oIvR7PdA/tI8/pm4jCbtDkM8ZaEZec5pZuYQI5MZ5A3rerYjnNUuwkhkWHZCwDQIDAQAB;
Selector: selector2 (TXT on selector2._domainkey.tradecircle.biz)
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0df477sltJ84W+U65Z/x1GVnUqYG1hfAB889+m02RKacJa8IU2YQ2e6vvVpuAjegDo/WI1rz2+jAX6KPv3jbnAcVPVzBL8ANjvU46DapQH62cJqc8anHZMNwOj4SaTci2r9pxug+sBn0G852+S+a0kfl4FUYQVyjBcVqn7jmtGbOZH05uZed7soNFFyBOw0ig7IEOheyzzNY0a2YKjhg76PCqJo1BIZcwvlyZ5ukaA8GMXcE0UrAXstxoPQ1EbP007VLE1jjQUkQ6NstsU65Kbb7tcrfEinkeQCvdpO2/q9rZrvSytnykywfA21GYCQlmuIE8RlGBQHmXtI0A1dD6QIDAQAB;

FAQ

Why does DKIM require a selector?
Selectors allow rotating keys and running multiple keys per domain.
Where is DKIM published?
TXT on <selector>._domainkey.<domain>.
DKIM record exists but emails still fail DKIM?
Signing may be disabled or the selector used in email differs from DNS.
Do I need DKIM if I have SPF?
Yes, many providers use both for best deliverability and DMARC alignment.
Can I have multiple DKIM selectors?
Yes, that is common for key rotation or multiple senders.

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing emails. DNS stores a public key that allows receivers to verify authenticity.

Example

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0B...

Common mistakes

  • Wrong selector (the record exists but under a different selector).
  • Key is split incorrectly across multiple TXT chunks (some DNS UIs break it).
  • Publishing DKIM but not enabling signing on the mail provider.