Email authentication

DKIM Selector Finder

Find a domain's DKIM selectors by probing 24+ common selectors over live DNS. See which have a published key — free, no signup.

Find DKIM selectors

We probe the most common selectors used by Google, Microsoft, Zoho, Amazon SES and more.

What this DKIM selector finder does

Probes 24+ common DKIM selectors over DNS-over-HTTPS
Confirms which selectors have a live DKIM record
Shows the DNS host and the published public key
Estimates each key's size and flags revoked keys
Covers Google, Microsoft, Zoho, SES, Mailchimp and more
Points you to the header method when a selector is custom

Common use cases

  1. 1Discovering which DKIM selectors a domain publishes
  2. 2Auditing a domain you are migrating or taking over
  3. 3Verifying a provider set DKIM up correctly
  4. 4Finding a forgotten selector before rotating keys
  5. 5Checking a competitor or partner's email setup
  6. 6Confirming DKIM exists before enforcing DMARC

Related tools

DKIM Record CheckerDKIM key generatorSPF Record CheckerDMARC Record CheckerEmail Authentication AnalyzerEmail Header Analyzer

About DKIM selectors

A DKIM selector is a label that points to one specific public key in your DNS, published at selector._domainkey.yourdomain.com. A domain can have many selectors — one per sending service or key rotation — and there is no DNS command to list them, which is why this tool probes the selectors providers commonly use.

If your selector is custom, the reliable way to find it is to open a message you sent, view its headers, and read the s= tag in the DKIM-Signature line. Then paste that selector into the DKIM Record Checker to validate the key.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

Can DKIM selectors be listed from DNS?

No. DNS has no way to enumerate selectors, so this tool probes a curated list of selectors that common providers use (Google, Microsoft, Zoho, Amazon SES, Mailchimp and more).

What if my selector is not found?

Open a message you sent, view its raw headers, and read the s= tag in the DKIM-Signature line — that is your selector. Confirm it with the DKIM Record Checker.

What is a DKIM selector?

A selector labels one specific public key in your DNS at selector._domainkey.yourdomain.com. Domains often have several — one per sending service or key rotation.

Does this use live DNS?

Yes. Every selector is queried over DNS-over-HTTPS at the moment you run it — no cached results.

Why do some selectors show as revoked?

A DKIM record with an empty p= value is a revoked key. Receivers treat DKIM as failed for that selector, so it should be removed or replaced.

Is finding selectors a security risk?

No. DKIM public keys are meant to be public — only the private key is secret. Discovering selectors simply helps you audit a domain's email setup.