Find your DKIM selector from an email header
A signed email names its selector. Paste the header of one you sent, and we will read the selector and hand it to the DKIM checker.
The header is read in this browser and never sent anywhere. This page loads only its own scripts and sends nothing to another site. Once it has read a selector, it asks our API for that one public key — sending the domain and the selector, nothing else from the header — and checks the signature here, in your browser.
Nothing was read.
Nothing from this header was sent anywhere.
The link carries the domain and the selector, and nothing else from the header. The checker reports on the key's size and age as for a selector you typed.
The published key and the signature
The key is looked up by our API from the domain and the selector alone; the signature is checked here, in your browser, against it.
What the receiving server recorded
These are the receiver's own verdicts, read from the header — its claim, not a check we ran.
DMARC alignment
Delivery path
Everything on this page was worked out in this tab and is not kept: it is gone when you leave or reload the page.