Suped

DKIM checker

Look up any DKIM selector's DNS record and validate key length, hash algorithm, and testing mode.

Available at https://www.suped.com/tools/dkim-checker.

Look up a DKIM record for any domain. Enter the domain and, optionally, a selector. If you leave the selector blank, the checker scans 50+ common selectors (google, s1, s2, selector1, selector2, dkim, key1, and more) and returns every match it finds.

DKIM checker sample results showing selector, DKIM DNS record, validation checks, parameters, and share link

How it works

If your record is published at google._domainkey.example.com, enter example.com as the domain and google as the selector. Leaving the selector blank lets the checker auto-detect common selectors, but cannot guarantee it finds a provider-specific one.

Click View sample to see results for suped.com without entering a domain.

Checks (per selector)

Each selector found is scored independently. Scores are aggregated across all selectors.

  • DKIM record found
  • Single record (no duplicates)
  • Record valid (syntax)
  • Supported encryption algorithm (rsa or ed25519)
  • Secure hash algorithm (sha256)
  • Secure key length (2048-bit RSA)
  • Not in testing mode (t=y)

Common DKIM selectors scanned

When no selector is provided, the checker queries a list of common selectors used by major providers. Examples include google (Google Workspace), selector1 / selector2 (Microsoft 365), k1 / k2 / k3 (Mailchimp), s1 / s2 (SendGrid), mxvault (MXroute), plus generic fallbacks like dkim, default, mail, and email.

In-app version

The same DKIM checker is available inside the app under Tools → DKIM checker. Use it the same way you would the public tool. Results and the share link are identical to the public version.