Enter your domain to check its DKIM record configuration and verify email authenticity.
DKIM, which stands for DomainKeys Identified Mail, is a mechanism that validates an email sender's identity. It is an email authentication standard that enables recipients to confirm that the email was sent and was authorized by the domain owner.
The DKIM Record Checker checks for the presence of a DKIM record for your domain and verifies it is formatted as required. DKIM provides protection against email spoofing or tampering for your email messages through authentic DKIM signing. The DKIM Record Checker will help you:
The DKIM Record Checker is used together with SPF and DMARC to achieve comprehensive email authentication. When DKIM is properly implemented, organizations can verify outgoing emails and prevent cybercriminals from impersonating their domain.
This DKIM lookup means that plain and simple, no matter your role (IT admin, marketer, whoever) domain DKIM records are verified in seconds.
When a domain has DKIM implementation, the sending mail server will append a digital signature to each mail it sends.
The signature is unique to that specific domain and includes important headers from the message. Common headers to be included in the DKIM signature include From, To, Date, and Subject.
The DKIM Record Checker can help validate this process by locating the public DKIM key in your domain's DNS. Meanwhile, receiving mail servers will authenticate the message using the public key provided when the email was sent while validating the authenticity of the email and verifying that the message was not altered after being sent.
The DKIM Record Checker verifies whether your domain has a DKIM record, and that it's both syntactically correct and retrievable through DNS. It also checks for other errors and omissions (i.e., the lack of a key, nothing to sign, etc.). Lastly, it queries whether your DKIM record can be aligned with the authentication with email practice.
If the DKIM Record Checker cannot find your DKIM record, it may be due to an incorrect selector, DNS propagation delay, or the record not being published publicly. Ensure your mail provider has generated and added the correct TXT record to your DNS.
If your DKIM record is not valid, then your outbound emails will not be digitally signed. This can leave your emails vulnerable to spoofing and can lead them to be marked as spam. A test with the DKIM Record Checker will help you identify the exact problem with your DKIM record, as well as how to fix it.