DKIM Record
A DKIM record publishes the public key used to verify DomainKeys Identified Mail signatures. It lives at selector._domainkey.domain as a DNS TXT record.
Record shape
The selector is chosen by the signing system (for example selector1 for Microsoft 365). The TXT content includes v=DKIM1 and p= (public key).
Host: selector1._domainkey
Type: TXT
Value: v=DKIM1; k=rsa; p=MIGfMA0GCS...Operations tips
Keep old selectors during rotation until mail signed with the new selector is confirmed. Empty p= can revoke a key.
How QuickDMARC helps
Monitor whether production mail presents passing aligned DKIM; use the DKIM checker to validate published selectors.
Frequently asked questions
Is DKIM a TXT at the apex?
No. It is under selector._domainkey.
What if p= is empty?
That revokes the key; signatures using it should fail.
Generator available?
Yes—DKIM record generator and DKIM checker.