Verify DKIM public key TXT record for a selector.
DKIM (DomainKeys Identified Mail) uses a public key published in DNS and a private key used to sign outgoing mail. Receivers fetch the public key from a TXT record at {selector}._domainkey.{domain}. This tool looks up that TXT record for a given domain and selector and shows the key and tags (v, k, p, etc.). Use it to confirm that your DKIM setup is published correctly after configuration, to troubleshoot "signature verification failed", or to verify a selector name. Wrong selector or missing record breaks DKIM verification.
A label you choose (e.g. default, s1) that forms the subdomain where the public key is stored: selector._domainkey.domain.
Your mail provider (SendGrid, Mailchimp, etc.) tells you the selector they use; you publish the key they give you.
Yes. Different services or key rotations can use different selectors.
Selector or domain typo, key not yet propagated, or TXT record malformed. Use this checker to confirm the record.
No. Only the public key goes in DNS. The private key stays on your mail server and must never be published.