DKIM: is your mail signed, and can receivers verify the signature?

DKIM signs your mail with a private key and publishes the public half in DNS at {selector}._domainkey.your-domain. Because the signature covers the content, it survives forwarding — the reason DKIM matters even when SPF passes.

Receivers cannot guess your selector; they must already know it (it travels inside the mail header). Our probe checks the common selector names so you can confirm a key is published, not revoked, and large enough to matter.

Other tools: SPF · DMARC · llms.txt · Header analyzer