DKIM for Google Workspace

Google Workspace uses the selector google. Enter your domain and google below to check the key is published.

  • Free
  • No Sign-Up
  • Live Lookup

Examples:

DKIM Checker

Google Workspace DKIM

Selectorgoogle
Record Namegoogle._domainkey.yourdomain
Check From a Terminaldig +short TXT google._domainkey.example.com
SPF and Set-Upfrabs.net/tools/spf-checker/google-workspace/

Mail from Google Workspace carries a DKIM-Signature header with s=google (or another selector the provider shows for your domain). Receivers fetch the public key from google._domainkey on your domain to check it.

If the record is a CNAME, the provider hosts the key and can rotate it for you; keep the CNAME exactly as given.

Questions

What is the DKIM selector for Google Workspace?
google, unless your admin panel shows a different one for your domain.
Why does DKIM still fail?
Signing must also be switched on in the provider's settings, and the record must be published exactly, without extra quotes or spaces.

Your customers' VMs sending spam?

Frabs spots outbound spam from any VM within seconds and stops it, before your IPs end up on a blocklist.