Identifying Your DKIM Selector for Marketing Cloud Engagement

Standard DKIM Selectors by Stack

The table below lists the standard DKIM selectors associated with the corresponding Marketing Cloud Engagement stacks.

• S1, S4, S6, S7: 200608
• S10: 10dkim1
• S11: 11dkim1
• S12: 12dkim1
• S13: 13dkim1
• S50: 50dkim1
• S51: 51dkim1

*note*

The DKIM selectors above are accurate as of the publication date of this document. Due to routine security enhancements and key rotation, selector names may change. To ensure you always have the most current information, you must check the DKIM-Signature header of a recently received email.

Verification: How to Find Your Active DKIM Selector

If your specific stack is not listed above, or if you need to confirm the selector in use, you can identify the active selector by sending a test email from Marketing Cloud Engagement and inspecting the header information.

1. Send a Test Email: Initiate an email send from your Marketing Cloud Engagement environment to an external recipient address.

2. Inspect Email Headers: On the recipient side, open the received email and view the full message "source" or "headers." (The method for displaying headers is client-specific, e.g., Gmail, Outlook).

3. Locate the Selector: Search the header information for the line that begins with DKIM-Signature:. The value found in the s= tag within this line is the DKIM selector currently in use.

Example Header Snippet:

DKIM-Signature: v=1; a=rsa-sha256; ... s=10dkim1; ...

In this example, the active DKIM selector is 10dkim1.

Advanced Verification: Checking the DNS Record

Once you have identified the DKIM selector from the email header, you can confirm that the corresponding DKIM record is correctly configured in your DNS using the dig command.

Use the following command structure in your terminal, replacing the bracketed placeholders with your specific values:

$ dig TXT {DKIM_SELECTOR}._domainkey.{SENDING_DOMAIN}