GuguCheck it
DKIM Test
Check the record needed to sign outgoing email.
DKIM is a digital signature that helps prove an email came from you.
Enter a domain and press “Gugu!” to see a clear summary here.
Generated with gugu.tr. Results reflect the state at the time of the test.
About DKIM
DKIM is a digital signature added to an email. The receiving server uses the public key in DNS to check that the message came from your sending system and was not changed in transit.
DKIM helps reduce brand and domain impersonation and supports deliverability. For DMARC to work well, either SPF or DKIM needs to pass.
How do I fix DKIM?
- Enable DKIM in your sending service and publish the DNS record name and TXT value it gives you exactly.
- Make sure the selector in the sending settings matches the selector in DNS.
- Keep the private key only in the sending service, leave the public key in DNS, and rotate keys when needed.
Frequently asked questions
What is a selector?
A selector is the short name that identifies which DKIM key is in use. It appears in DNS under selector._domainkey.
What is the difference between a public and private key?
The public key is visible in DNS and verifies the signature. The private key creates the signature; keep it secret and never share it.
Why can DKIM fail?
A missing or incorrect TXT record, selector mismatch, or a sending step that changes a message after signing are common causes.