DKIM for Proton Mail

Proton Mail uses the selector protonmail. Enter your domain and protonmail below to check the key is published.

  • Free
  • No Sign-Up
  • Live Lookup

Examples:

DKIM Checker

Proton Mail DKIM

Selectorprotonmail
Record Nameprotonmail._domainkey.yourdomain
Check From a Terminaldig +short TXT protonmail._domainkey.example.com
SPF and Set-Upfrabs.net/tools/spf-checker/proton-mail/

Mail from Proton Mail carries a DKIM-Signature header with s=protonmail (or another selector the provider shows for your domain). Receivers fetch the public key from protonmail._domainkey on your domain to check it.

If the record is a CNAME, the provider hosts the key and can rotate it for you; keep the CNAME exactly as given.

Questions

What is the DKIM selector for Proton Mail?
protonmail, unless your admin panel shows a different one for your domain.
Why does DKIM still fail?
Signing must also be switched on in the provider's settings, and the record must be published exactly, without extra quotes or spaces.

Your customers' VMs sending spam?

Frabs spots outbound spam from any VM within seconds and stops it, before your IPs end up on a blocklist.