Inspect any domain's selector._domainkey TXT record, verify v=DKIM1 syntax, measure the exact RSA public key bit-length (1024-bit vs 2048-bit), or leave the selector blank to auto-scan 14 popular ESP selectors.
Unlike SPF and DMARC, DKIM records live under a specific selector subdomain (<selector>._domainkey.yourdomain.com) so a domain can use multiple sending services simultaneously. Here are the default selectors used by major providers:
| Email Provider / ESP | Default DKIM Selector(s) | DNS Hostname Format |
|---|---|---|
| Google Workspace | google | google._domainkey.domain.com |
| Microsoft 365 / Exchange | selector1, selector2 | selector1._domainkey.domain.com |
| Mailchimp / Mandrill | k1, k2, k3, mandrill | k2._domainkey.domain.com |
| SendGrid | s1, s2 | s1._domainkey.domain.com |
| ProtonMail | protonmail, protonmail2, protonmail3 | protonmail._domainkey.domain.com |
| cPanel / Postfix / Custom | default, mail, dkim | default._domainkey.domain.com |
Need to generate a new 2048-bit RSA DKIM keypair for your own mail server? Use our Free DKIM Key & Record Generator, or pair your DKIM setup with our SPF Record Generator and DMARC Record Generator.