Free DKIM check
DKIM check. Are your emails signed?
DKIM adds a digital signature to every email you send, so the receiver can tell it really came from you and wasn't changed on the way. Enter your domain and we look for the DKIM keys your email provider uses. It checks MX, SPF and DMARC at the same time.
What it looks at
- Your email provider
- Read from your mail (MX) records, so we know which DKIM selectors to look for.
- Your DKIM keys
- We look up the selectors your provider uses, such as google for Google Workspace or selector1 and selector2 for Microsoft 365, plus common ones like default and k1.
- Publishing is only half of it
- With most providers you publish the key in your DNS and then switch signing on in their admin panel. Both are needed.
- How it fits with SPF and DMARC
- DKIM, SPF and DMARC work together. The report shows all three, so you can see what is still missing.
Questions
- Why does it say no DKIM key was found when I have one?
- DKIM keys sit under a name called a selector, and some services use their own. We try up to 16 common selectors. If yours uses a custom one, check it in your provider's admin panel.
- How do I set up DKIM for Google Workspace?
- In the Google Admin console, open the Gmail settings and find Authenticate email. Generate a key, add it to your DNS as a TXT record, then start authentication.
- How do I set up DKIM for Microsoft 365?
- In the Microsoft Defender portal, find the DKIM settings under email authentication. Add the two CNAME records it gives you to your DNS, then enable signing.
- Is it free?
- Yes. No sign-up. We only read public DNS records and do not store your domain.