Skip to main content
HostRepute Logo
Back to Tools

Record builder

DKIM Record Generator

Build the correct _domainkey record name and TXT template for your selector and key type, then paste in the public key your mail platform generates.

  • Build the selector._domainkey record name
  • Generate the v=DKIM1 TXT template
  • Get guidance for RSA and Ed25519 keys

Inspect a live record

Results are generated on demand so you can verify the current public configuration.

This tool builds the DNS record name and template. It does not generate cryptographic keys. Generate your key pair with your mail provider, then paste the public key into the record.

About This Tool

What is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing mail. Receivers fetch your public key from DNS to verify the message was not altered and came from your domain.

Why is the key not generated here?
Your private signing key must stay secret and live where your mail is signed. Generate the key pair with your provider or a trusted local tool, keep the private key safe, and publish only the public key in the record this tool builds.

Frequently Asked Questions

Does this generate a DKIM key pair? +

No. For security, key generation stays with your mail platform. This tool builds the DNS record name and template, then you paste in the public key it emits.

Where do I publish a DKIM record? +

Publish it as a TXT record at selector._domainkey.yourdomain.com, using the selector your mail platform assigns.

RSA or Ed25519? +

RSA (2048-bit) is universally supported. Ed25519 is shorter and modern but not supported by every receiver, so it is usually published alongside an RSA key.