DKIM record check

Verifies DKIM selector records exist and use ≥1024-bit keys — the invisible half of email deliverability that most teams forget.

Quick answer

Add your DKIM selectors in the site editor. Lemwatch checks that each selector._domainkey record resolves and uses a strong key.

What it checks

Where to find it in Lemwatch

Site details → Security → Email auth → Selectors. Add one row per selector (e.g. google, s1).

How to fix

  1. Ask your mail provider for their DKIM selector name.
  2. Add the selector in Lemwatch.
  3. Publish the TXT record at <selector>._domainkey.yourdomain.com.
  4. Rotate keys yearly to 2048-bit.

FAQ

How many selectors can I add?

Up to 5 per site.

Does Lemwatch verify signatures on real messages?

No — record health only. For signature verification use your provider's dashboard.

Related