Switching from UptimeRobot? Import your monitors in one click with a read-only API key.Start free →
  1. Home
  2. Free tools
  3. DKIM lookup

Free DKIM lookup

Look up DKIM public keys. Leave the selector blank to try the usual ones, or type the selector from a message header.

Lookups use Cloudflare 1.1.1.1 from your browser.

Results appear here.

A rotated key that never got published fails every signatureTenium can watch the TXT record at selector._domainkey and alert when the key disappears.

Start free

Selector plus domain

A DKIM key lives at selector._domainkey.example.com. The selector is in the s= tag of the DKIM-Signature header. Google often uses google. Microsoft uses selector1 and selector2. A blank result for one selector says nothing about the others.

What you should see

A real key is a TXT record containing v=DKIM1 and a p= value. p= with an empty value is a revoked key. That is deliberate, and mail signed with it will fail.

Related checks

SPF lookup · DMARC lookup · MX lookup · TXT lookup · DNS monitoring

Command-line equivalent

dig +short google._domainkey.example.com TXT

More free tools

Is it down?Check a site from 2 regionsUptime calculatorTurn 99.9% into minutesCron expression builderBuild and explain cron schedulesSSL checkerCertificate expiry and chainDNS lookupEvery common record in one checkHTTP status codesEvery code, and what to do about itHTTP headersInspect response headersDomain expiryWhen does a domain expire?Subnet calculatorCIDR to ranges and masksResponse time testLatency from 2 regionsUptime badgeSVG badge for your READMESPF, DKIM and DMARC checkerIs your domain’s email authenticated?