Verify DKIM with dig and Online Tools
Last updated
The dig tool is a good way to verify your DKIM record is being returned correctly by DNSimple’s name servers.
To verify the DKIM record, query for the TXT record at the full name where it lives: the selector, ._domainkey., and your domain.
For example, for the selector google on example.com:
dig +short google._domainkey.example.com TXT
This will return a result like this:
"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3QEKyU1fSma0axspqYK5iAj+54lsAg4qRRCnpKK68hawSd8zpsDz77ntGCR0X2mHVvkf0WEOIqaspaG/A5IGxieiWer+wBX8lW2tE4NHTE0PLhHqL0uD2sif2pKoPR3Wr6n/rbiihGYCIzvuY4/U5GigNUGls/QUbCPRyzho30wIDAQAB"
If your provider gave you a CNAME record instead, the same query follows the CNAME and returns the provider’s key.
If no result is returned, verify the record was added with the correct name. To rule out caching, query DNSimple’s name server directly by adding @ns1.dnsimple-edge.com to the command.
Note
The Name field in DNSimple should not include your domain name, otherwise you will create a record at subdomain.yourdomain.com.yourdomain.com.
Verifying your DKIM with an online tool
Verify your DKIM with an online tool like the mail-tester SPF and DKIM check. It checks that you have SPF and DKIM records. In the DKIM selector field, add the first part of the subdomain your DKIM is under. For example, if your DKIM is at google._domainkey.example.com, then the DKIM selector is google.
If your DKIM record is published correctly but messages are still failing authentication, see Troubleshoot Email Authentication for common causes like selector mismatches and key issues.
Technical details
DKIM is defined in RFC 6376.
If you want more details on DKIM record formats, view our DKIM Record Reference.
Have more questions?
If you have additional questions or need any assistance with your DKIM records, just contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.