DKIM Record Checker

What is a DKIM Record?

DomainKeys Identified Mail (DKIM) is an email authentication method that enables a receiving mail server to verify that an email was actually sent and authorized by the owner of that domain. DKIM adds a digital signature to the headers of an email message, which can be validated against a public cryptographic key published in the DNS records.

Why DKIM Records Matter

DKIM helps prevent email spoofing and phishing by allowing recipients to verify the authenticity of incoming emails. Properly configured DKIM records significantly improve email deliverability by ensuring your emails pass authentication checks and don't get flagged as spam.

How to Set Up DKIM for Common Email Providers

Google Workspace / Gmail

For Google Workspace (formerly G Suite), you'll need to generate a DKIM key through the admin console and add it to your DNS records.

Sign in to your Google Admin console
Go to Apps > Google Workspace > Gmail > Authenticate email
Select your domain and click "Generate new record"
Copy the generated TXT record and add it to your DNS settings

The selector is typically "google" for Google Workspace accounts.

Microsoft 365 / Exchange Online

For Microsoft 365, you'll need to:

Enable DKIM signing in the Microsoft 365 admin center
Add two CNAME records to your DNS: selector1 and selector2

The selectors are "selector1" and "selector2" for Microsoft 365.

Other Email Service Providers

Most modern email service providers offer simple ways to set up DKIM:

Amazon SES: Create DKIM identities in the SES console
Mailchimp: Authenticate your domain through the account settings
SendGrid: Use their "Authenticate Your Domain" feature

Need Help?

Setting up DKIM correctly can be challenging. If you need assistance, consider:

Contacting your domain registrar or DNS provider
Consulting with your email service provider
Create a free Buffsend account for more deliverability tools and support