A DKIM record is a TXT record that publishes the public key receivers use to check your signatures. Once you know its parts, it is easy to read.
The record sits at the selector name followed by ._domainkey and your domain. For a selector called s1 on example.com, that is s1._domainkey.example.com.
It usually starts with v=DKIM1, followed by k=rsa for the key type and p= with the public key, a long string of letters and digits. Extra tags are optional.
The key is long, so the value is often split into several quoted strings in the DNS panel. Receivers join them into one.
Some providers ask you to publish a CNAME at the selector name instead. It points to a TXT record on their side, so they can renew the key without you changing anything.
DNS Domain Detective finds the selectors of your domain and shows the DKIM records that are in place. Open DNS Domain Detective
DNS Domain Detective is now available on the App Store.
Last reviewed: 2026-11-02
#DNS #DKIM #SPF #DMARC #EmailSecurity #SysAdmin #MSP #iOS
This page gives general information and is not legal, financial or medical advice. [email protected]