Runs in your browser

DKIM record checker

Find the DKIM keys a domain publishes and check their length. It tries 40 commonly used selectors, including the defaults of major mail services, plus any you enter, straight from your browser.

Check a domain

How DKIM keys are found

A DKIM public key is a TXT record at <selector>._domainkey.<domain> (RFC 6376). The selector is chosen by whoever sends the mail, so no tool can list every key a domain has.
Your selector is in the s= tag of the DKIM-Signature header of any message the domain sent. Enter it above if the sweep finds nothing.
Gmail and Yahoo require RSA keys of at least 1024 bits (sender requirements); RFC 8301 says signers should use at least 2048. An empty p= means the key was revoked, which is normal for a retired key.
Lookups go from your browser to Cloudflare’s public DNS-over-HTTPS service; MyIPScan does not see the domain you check.