DKIM Lookup
DKIM keys have no directory. If you don’t know the selector, we’ll try 100 common ones at once and tell you what we find.
Keys found
8
Selectors tried
100
Strongest key
2048-bit
Weakest key
1024-bit
Warnings
- Weak key size: selector1 is 1024-bit1024-bit keys still verify but sit below current guidance. Rotate to 2048 — the only real obstacle is that the DNS record exceeds 255 characters and must be split into multiple strings.
- Weak key size: smtpapi is 1024-bit1024-bit keys still verify but sit below current guidance. Rotate to 2048 — the only real obstacle is that the DNS record exceeds 255 characters and must be split into multiple strings.
- Weak key size: k1 is 1024-bit1024-bit keys still verify but sit below current guidance. Rotate to 2048 — the only real obstacle is that the DNS record exceeds 255 characters and must be split into multiple strings.
- Weak key size: cm is 1024-bit1024-bit keys still verify but sit below current guidance. Rotate to 2048 — the only real obstacle is that the DNS record exceeds 255 characters and must be split into multiple strings.
- Weak key size: mailo is 1024-bit1024-bit keys still verify but sit below current guidance. Rotate to 2048 — the only real obstacle is that the DNS record exceeds 255 characters and must be split into multiple strings.
Looking good
- Strong key: k2 is 2048-bit RSAMeets current guidance.
- Strong key: k3 is 2048-bit RSAMeets current guidance.
- Strong key: google is 2048-bit RSAMeets current guidance.
Keys
| Selector | Type | Size | Flags | Likely provider |
|---|---|---|---|---|
| selector1 selector1._domainkey.github.com | RSA | 1024-bit weak | none | Microsoft 365 (named in your SPF record) |
| smtpapi smtpapi._domainkey.github.com | RSA | 1024-bit weak | t=s | SendGrid (named in your SPF record) |
| k1 k1._domainkey.github.com | RSA | 1024-bit weak | none | Mailchimp (named in your SPF record) |
| k2 k2._domainkey.github.com | RSA | 2048-bit | none | Mailchimp (named in your SPF record) |
| k3 k3._domainkey.github.com | RSA | 2048-bit | none | Mailchimp (named in your SPF record) |
| google google._domainkey.github.com | RSA | 2048-bit | none | Google Workspace |
| cm cm._domainkey.github.com | RSA | 1024-bit weak | none | Campaign Monitor |
| mailo mailo._domainkey.github.com | RSA | 1024-bit weak | none | generic |
Records
selector1._domainkey.github.com
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxZC/z2cK+2s1f/ktzSDSeFzkfIHrjwtGFsfKMAYvKaXjPVNzKykpbXBkX5nB7dVUTFttda7aROr2iSrIseQ27Ui+4rUZVzgFanE8RaXhYM9n5wPKNv8GtLJk7JgcsYZ7ErgID4uW2sEYyV/dnRYw6rDzOaeRKkKELTUfJI5ebLQIDAQAB;
smtpapi._domainkey.github.com
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB
k1._domainkey.github.com
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
k2._domainkey.github.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
k3._domainkey.github.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYGiMSn7fsUqSvfSX40x9R1OlRtbNiCY80lHRIlcKx3XDIR7257aUx+q9CSIARdfTL6KCuLGNFx5g9TgVr6png4ajcieSQGtOehBgxnkDN8aAA5TX0FmFrcefJU0JoxLOF09EKgXxhSSHCk/ekVb0PXSboHXoZ9+EI404F1qhcwXXIgHXTaUthHTut2P6BBZhIXIgvDe/w49GchR7MRJqjNb7neEBbYHbgWuBTvvHCg7Gy6m6n9krYK+ROWq3dVvXy9plAGK3ygM+HtjIiMt7arRGMOF0WgDTz7YdN9BGpt6BvXxLnjiQcgS5T9n+cIyPZgiWzDMXNlaEEdKTEKxrwIDAQAB;
google._domainkey.github.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6T5sl/RwdSqGoYWaWaFbS2UAeyPrEmd0gogocmRfS441qwR8/0KB81Hw89P0l4YiFRrXYk7NVIGfyCRHAYYZUzCkGeOysI2EjgzLFhd/NEsbRzOEc/kWkK/RO6JFq/5lOn6M9AZw/ap9tds4JG9ApgNNdSpPxp9DmvpsOSgNMVflRxQFrk3kdS4RNAPKu/OPoA7dlR/A/pECryjRoYgENtDXzdnK70HgCekems6UDzxDj61cjyoKoXtEMF/QsaHEQ1Gjfv014rDJBsubk/kT5VqHkWHa/ia68Z5r228Ety/wFfQNjXTx/J7KGZ9GkZlKED659eiJcLnWcKDSiQlhwIDAQAB
cm._domainkey.github.com
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXLybkpDQnCyQYlQc46kL2sPMsYDqwkjPyFRSDiaq6qUeujAlU775+f8rzxIrjHc8sPstAZOuJzqcgDPiidRxdE2Th/lcnfbN4btWvJwHKK6KD/IazNWNqQtunYyPzfmSRTtOE4Nii4Oxwx1glTJAVhCTObD2uh2U44lCG+pgYswIDAQAB
mailo._domainkey.github.com
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQPJBpMLQPx0UvC5HXIoVHgwfowk1OjOqnQNcVjbcpKTcCeOkXuTdT1U33weODlOlNTB+GIFWRpDGYZDdMvu2ffzpHTNMeRALvMhIrzNLpJbco+InXab5PzFnGdaBNVUKhv7zPlBkYKA3tNKwyRwCH8Wgja3q7Mg8rUIBklICYfQIDAQAB
A DKIM key on its own proves nothing about a message — it has to be signed with, and aligned to, the From domain. Check this domain’s DMARC & SPF, or paste a real message’s headers to see whether signing actually happens.