What is DKIM? Email’s tamper-evident seal
DKIM is a wax seal for email: your server signs the message; the receiver checks a public key in DNS to prove nobody swapped the contents in transit.
US search interest: “dkim” ~6.6k/mo · “dkim checker” ~5.4k/mo (DataForSEO).
What CrowWake checks
We query common DKIM selector names (default, google, selector1, selector2, and any you configure) at selector._domainkey.yourdomain. We look for a TXT record that looks like a DKIM public key (v=DKIM1 or k=rsa).
Why it matters
Providers treat signed mail as more trustworthy. DKIM also feeds DMARC: without a valid signature aligned to your domain, DMARC cannot fully protect you from spoofing—even if SPF exists.
What “good enough” looks like
At least one live selector for every platform that sends as you. Keys rotate without downtime (publish the new selector before retiring the old). Do not delete a selector while a provider still signs with it.
If CrowWake crows
No selectors found → open your mail provider’s DKIM setup and publish the TXT they give you. Partial coverage is normal if you only use one ESP—just make sure that ESP’s selector is present.
Watch this on CrowWake
Add the domain, leave the boxes checked, and the flock will crow when this drifts.