// FREE TOOL
DKIM Record Checker
No signup. No limits. Same continuous check we run on every managed mailbox.
What DKIM does
Adds a cryptographic signature proving the message wasn't modified and that your domain authorized the send. Without it, modern receivers treat your mail with skepticism.
Why 2048-bit matters in 2026
Major providers treat 1024-bit as weak and may downgrade reputation. Always provision 2048-bit keys.
Finding your selector
Google Workspace: 'google'. Microsoft 365: 'selector1' and 'selector2'. Custom SMTP varies — check provider docs.
Why DKIM fails after DNS migrations
CNAME flattening, truncated TXT records (DKIM keys exceed 255 chars and need string splitting), forgotten records during provider switches.
Common questions
A name identifying which key in your DNS to use. Common: google (Workspace), selector1/selector2 (M365), s1/s2 (custom).
CLAYINBOX runs this check continuously on every domain it manages — automatically.