# DKIM Record Checker

EasyDMARC's DKIM validator is the easiest way to verify the digital signatures and integrity of incoming emails to prevent spoofing, phishing, and spam.

## Use EasyDMARC’s **DKIM Record Check** Tool to Find and Fix Email Authentication Issues

EasyDMARC's DKIM Checker tests and validates your domain’s DKIM (DomainKeys Identified Mail) and makes sure it’s implemented correctly. Our DKIM Record Checker analyzes emails to confirm that they have been signed using the private key of a given domain and that the digital signature is valid. This helps domain owners take control of messages, confirming that each comes from the reported domain and has not been altered in transit.

## What is a DKIM Record?

- A DKIM record is a TXT-format DNS entry containing the selector and the public key used for email authentication. The selector identifies the specific private key used to sign the email message, while the public key is used to verify the signature of the email message.

Here is an example of a DKIM record:

In this example, **mailo** is the selector prefix, and **easydmarc.online** is the domain name. The **v=DKIM1** tag indicates that this is a DKIM record, **k=rsa** specifies that RSA encryption is used, and **p=** includes the public key for the domain.

## How Does DKIM Work?

When a recipient's email server receives an email message, it uses the public key from the sender's DNS record to validate the signature in the email header. If the signature is valid, the recipient can be confident that the email comes from the domain it claims to be from and that the contents of the email have not been tampered with in transit.

To use DKIM, a domain owner must create a public/private key pair, publish the public key in a DNS TXT record under the domain name, and configure their email server to sign outgoing messages using the private key.

## What is a DKIM Record Check?

A DKIM record check is a process that verifies the authenticity of a domain's DKIM record. When an email is sent, the sender’s mail server signs the email with a private key. Upon receiving the email, the recipient’s server retrieves the corresponding DKIM record from the DNS using the selector. It then validates the signature in the email header with the public key.

## Why Use EasyDMARC for DKIM Record Checks?

Our DKIM checker tool simplifies the DKIM record-checking process by locating your domain's DKIM record and validating its accuracy. Our tool offers a unique advantage by automatically detecting DKIM keys using predefined selectors, streamlining the lookup process.

## EasyDMARC Has Everything You Need For **Secure Servers**

Explore EasyDMARC's free email authentication tools to enhance your domain's security and improve email deliverability. From verifying SPF, DKIM, and DMARC records to analyzing reports, our tools provide actionable insights to safeguard your domain against spoofing and email fraud.

## Frequently Asked Questions

### DKIM Tag Explanations

| TAG | TAG DESCRIPTION |
| --- | --- |
| v | The version tag indicates the version of DKIM, and should always be set on 1. |
| p (required) | The public key tag is a string of characters generated during DKIM setup. Leaving the value empty deems it invalid. |
| t | This tag lists the flags in a colon-separated sequence. There are two defined flags: y and s. Undefined flags must be ignored. |
| s | This tag lists record-applicable service types. If the appropriate service type misses, the receiving servers must ignore the tag. Same goes with the unrecognized service types. |
| h | This tag defines the acceptable hash algorithms. In its default state, it allows all. Unrecognized algorithms must be ignored. The sender is responsible for determining each entry in the list. |
| k | This is the key type tag with a default value of "rsa". It's crucial that both sending and receiving servers support this value. |
| n | This tag acts like an optional note field for administrators. We recommend that you use this field only if necessary. |

## Why do you need DKIM, DMARC, and SPF checks?

DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication, Reporting, and Conformance), and SPF (Sender Policy Framework) are all email authentication protocols that help prevent email spoofing and improve email deliverability. Spammers and scammers use email spoofing to send fraudulent emails that appear to come from a legitimate sender.