DKIM for Microsoft 365
Microsoft 365 uses the selector selector1. Enter your domain and selector1 below to check the key is published.
- Free
- No Sign-Up
- Live Lookup
Examples:
DKIM Checker
Microsoft 365 DKIM
Selectorselector1
Record Nameselector1._domainkey.yourdomain
Check From a Terminaldig +short TXT selector1._domainkey.example.com
SPF and Set-Upfrabs.net/tools/spf-checker/microsoft-365/
Mail from Microsoft 365 carries a DKIM-Signature header with s=selector1 (or another selector the provider shows for your domain). Receivers fetch the public key from selector1._domainkey on your domain to check it.
If the record is a CNAME, the provider hosts the key and can rotate it for you; keep the CNAME exactly as given.
DKIM by Provider
Questions
What is the DKIM selector for Microsoft 365?
selector1, unless your admin panel shows a different one for your domain.
Why does DKIM still fail?
Signing must also be switched on in the provider's settings, and the record must be published exactly, without extra quotes or spaces.
Free Tools
More tools
DKIM CheckerFind and validate a domain's DKIM public keys by selector.SPF CheckerValidate an SPF record and count its DNS lookups against the limit of 10.DMARC CheckerRead a domain's DMARC policy, reporting address and alignment.DNS LookupA, AAAA, MX, NS, TXT, CNAME, SOA and CAA records for any domain.
Your customers' VMs sending spam?
Frabs spots outbound spam from any VM within seconds and stops it, before your IPs end up on a blocklist.