I receive a lot of email signed with DKIM. Usually I am not interested in checking that the signature is valid, but every now and then I would like to. Is there any tool to which I can feed the email as it is, which checks it (possibly retrieving keys via DNS or whatever) and tells me if the signature is correct or not and maybe other useful details?

4 Answers 4


Besides the already mentioned Thunderbird DKIM Verifier add-on, I can also recommend the Python module dkimpy for this. Under Debian and Ubuntu, it is available in the python-dkim package.

With dkimpy you can easily verify the DKIM signature with the dkimverify < email.eml command. To get more information why a signature is failing, use the -v option.


If you use Thunderbird, you can use the "DKIM Verifier" extension.


You can also use http://www.opendkim.org/ which comes as a debian package:

opendkim-testmsg < email.eml

Ideally your mailserver should be handling this. If an email is DKIM signed, but the signature doesn't match, the email should be rejected. It shouldn't even make it to your inbox.

  • 1
    That is true, but let us say that I want to check by myself. Maybe I do not trust my mailserver to be acting correctly. Or maybe the email was sent to me by different methods than SMTP. Commented Feb 18, 2016 at 13:18

Not the answer you're looking for? Browse other questions tagged .