Email · Fix guide
How to verify DKIM
- DKIM
- DomainKeys Identified Mail
DKIM public keys live under selector names that cannot be reliably discovered by guessing.
What is DKIM?
DomainKeys Identified Mail adds a cryptographic signature to outgoing messages. Receivers retrieve the public key from DNS using the selector named in the message and verify that signed content was not altered.
What to do next
- Send a message from each mail platform you use.
- Open the message headers and find the DKIM selector and signing domain.
- Check selector._domainkey.domain and confirm the authentication result passes.
Useful links
How to verify the fix
Inspect Authentication-Results in a received message or test a known selector.
When this result may be wrong
A guessed selector returning no record does not mean DKIM is absent. Some services rotate selectors.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.