Phishsight
All Tools
Free DKIM Tool

DKIM Record
Validator & Checker

Validate your domain's DKIM records for free. Check selectors, key types, key sizes, and signing configuration.

Enter a domain name without http:// or www (e.g., phishsight.com)

Selector Discovery

Automatically detect common DKIM selectors

Key Validation

Check key type (RSA/Ed25519) and key size

Record Analysis

Full DKIM record syntax validation

What is DKIM?

DomainKeys Identified Mail (DKIM)

DKIM is an email authentication method that allows the sending server to digitally sign outgoing messages. The receiving server verifies the signature using a public key published in the sender's DNS records, ensuring the email hasn't been tampered with in transit.

DKIM Selectors

DKIM selectors allow a domain to have multiple DKIM keys. Each email provider or service typically uses its own selector. Common selectors include:

google
selector1
selector2
default
s1
s2
k1
mandrill
smtp
mail

Key Types & Sizes

  • RSA 2048-bit (recommended): The current standard for DKIM keys. Provides strong security and broad compatibility.
  • RSA 1024-bit: Still accepted but considered weak. Should be upgraded to 2048-bit.
  • Ed25519: Modern elliptic curve keys offering equivalent security with smaller sizes. Not yet universally supported.