DKIM Inspector

Inspect DKIM records by domain and selector with key strength analysis.

DNS lookups and policy retrieval run from the PacketWizard server with SSRF protections and timeout handling.

What is DKIM Inspector?

A DKIM checker retrieves the public key DNS record for a domain/selector pair so you can verify publishing, key type, and strength used for outbound mail signatures.

How it works

Provide domain and selector. PacketWizard queries the DKIM TXT record and reports key parameters relevant to authentication health.

Common issues

  • Wrong selector

    Cloud mail providers rotate selectors (for example selector1/selector2). Confirm the selector from a signed message’s DKIM-Signature header.

  • Short RSA keys

    1024-bit keys are increasingly discouraged. Prefer 2048-bit RSA (or provider-supported modern algorithms) when rotating.

Frequently asked questions

Where do I find the DKIM selector?

Open a sent message’s headers and find s= in the DKIM-Signature field. That selector plus the domain forms the DNS name to query.

Related tools

Continue with these related PacketWizard tools for adjacent diagnostics.

SPF InspectorLookup, parse, and analyze SPF records with DNS lookup counting and evaluation tree.DMARC AnalyzerAnalyze DMARC policy records with syntax validation and report destination checks.DNS LookupQuery DNS records for a hostname or domain.Exchange Header AnalyzerParse email headers into a delivery timeline with authentication, anti-spam, and security analysis.