DKIM check
Check and validate DKIM keys via DNS-over-HTTPS.
The DNS query is sent directly from the browser to Google Public DNS. Nyttio does not store the data.
1. Enter domain and selector
Quick selection (popular selectors)
2. Overview
Results appear after a check.
3. Detailed analysis
Results appear after a check.
4. DNS-post (raw data)
Results appear after a check.
Note: DNS changes can take time to propagate depending on TTL and caching.
5. Analyze DKIM signature (optional)
Paste email headers to compare d= and s= with the checked DNS key.
Recommendations & best practice
Use a unique selector, publish at least a 1024-bit RSA key (2048 recommended), rotate keys, and use SHA-256.
Common selectors
selector1 · default · s1 · google · k1 · mail · microsoft
About DKIM
DKIM lets receivers check that signed message parts were not altered and that the key belongs to the stated domain.