DKIM Record Lookup
Look up the selector._domainkey TXT record for a DKIM public key.
DKIM Record Lookup fetches the TXT record at selector._domainkey.<domain> to show a domain's DKIM public key and settings. DKIM cryptographically signs outgoing mail so receivers can verify it wasn't forged — together with SPF and DMARC it drives deliverability and trust.
DKIM records exist per selector. The selector varies by provider (e.g. Google Workspace uses google) and can be found in the s= value of the DKIM-Signature header of a received email.
If you don't know the selector
DKIM can't be found by domain alone — you need the selector. Check the s= value in the DKIM-Signature header of an email you received. Common values: google, default, selector1/selector2 (Microsoft), k1 (Mailchimp). To analyze a whole received header at once, use Email Header Analyzer.
Key size
We estimate the RSA key size from the public key (p). 1024-bit is weak; use 2048-bit or larger. An empty p= means the key has been revoked.