Free tool
DKIM checker: are your emails signed?
Enter your domain and we'll try the common selectors, or add your own selector for an exact answer.
Your domain is sent to Cloudflare's public DNS service (or Google's if that fails) to read its public records. Siela doesn't see or keep it.
The short answer
DKIM adds a digital signature to your emails, so receivers can check that a message really came from your domain and wasn't changed on the way. The public key sits in a DNS record at a name that includes a selector, such as google._domainkey.yourdomain.com.
Finding your selector
Each provider picks its own selector, so no tool can check every possibility. To find yours:
- Send an email from your domain to yourself or a friend.
- Open the original message, using "Show original" in Gmail.
- Find the
DKIM-Signatureheader. The value afters=is your selector.
Common ones are google for Google Workspace, and selector1 and selector2 for Microsoft 365.
If nothing is found
That doesn't prove you have no DKIM, only that it isn't under a selector we tried. If you've never set it up, turn it on in your email provider's admin settings, add the record it gives you, and test again. In Google Workspace, you have to turn it on yourself.
Questions
What is DKIM?
An email signature check. Your server signs each message with a private key, and receivers verify it using a public key in your DNS.
What is a DKIM selector?
A label that says which key to use. It lets a domain have several keys, for example one per sending tool.
Why can't the tool find my DKIM record?
Probably because your provider uses a selector we didn't try. Find it in the DKIM-Signature header of an email you sent, and enter it above.
Do I need DKIM for cold email?
Yes, in practice. Google and Yahoo require SPF, DKIM and DMARC for bulk senders, and it helps your mail get trusted at any volume.
Find the people worth writing to.
Lead Finder looks for people with a reason to buy, then starts the conversation on LinkedIn, X and email from your own accounts.