Contains the public key. An empty p= value is used to revoke a key.
Email authentication
DKIM checker
Look up the public DKIM key published for a domain and selector, including CNAME-based selector setups.
Not sure what to enter? In a received email's DKIM-Signature header, use d= for the signing domain and s= for the selector. The Email Header Analyzer can find both for you.
Quick guide
Finding the right DKIM selector
A DKIM key is published at selector._domainkey.example.com. The domain alone is not enough - you also need the selector used by the sending service.
Selectors commonly appear in the DKIM-Signature header of a received email as s=selector and the signing domain as d=example.com. IPGetter's Email Header Analyzer can pull those values out for you.
Key algorithm. RSA is common; Ed25519 is also defined for DKIM.
Optional flags such as y for testing or s for strict domain matching.
The signing domain and selector are combined into selector._domainkey.domain. IPGetter then follows TXT or CNAME-based setups to locate the published DKIM key.
- Verifying a mail provider DKIM selector
- Checking whether a public key is published
- Troubleshooting DKIM signature failures
Terminal shortcut
Prefer the command line?
Look up a DKIM public key by domain and selector.
> dkim example.com selector
Run in Terminal ->