Free tool
Enter the domain and the selector from your mail provider (the part before ._domainkey in the record name, or the s= tag in a signed message). The record is fetched and the key decoded.
What this checks
DKIM signs outgoing mail with a private key; the matching public key is published as a TXT record at selector._domainkey.domain. The selector lets a domain have several keys at once (one per provider, or old and new during a rotation). Receivers read the selector from the signature header of each message, fetch the key and verify. A record with an empty p= revokes the key. Hosted providers usually ask for a CNAME to a record they manage, so they can rotate keys without you.
Related tools
Mailboxes in Luxembourg
NovaNode Mail gives you the MX, SPF, DKIM and DMARC records to copy into your DNS, with mailboxes stored in Luxembourg.
