Google Workspace uses the selector google by default when you generate DKIM in the Admin console. The public key lives at google._domainkey.yourdomain.com. When you enable DKIM in Admin console → Apps → Google Workspace → Gmail → Authenticate email, Google gives you the TXT record to publish. The default selector name is google, but you can specify a custom one for key rotation or multi-region setups. To look up the current selector on any domain, use the DKIM lookup tool. If it returns a valid public key, that’s the active selector.
All questions
How do I find the DKIM selector for Google Workspace?
Read the full guide
What Is DKIM?
DKIM attaches a cryptographic signature to every email you send. Receiving servers verify the signature against a public key in your DNS — proving the message is authentic and untampered. No DKIM means anyone can forge your brand's email.