DKIM Record Generator
Build the correct _domainkey record name and TXT template for your selector and key type, then paste in the public key your mail platform generates.
Workflow
Run check
Inspect a live record
Results are generated on demand so you can verify the current public configuration.
What is DKIM?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing mail. Receivers
fetch your public key from DNS to verify the message was not altered and came from your
domain.
Why is the key not generated here?
Your private signing key must stay secret and live where your mail is signed. Generate the
key pair with your provider or a trusted local tool, keep the private key safe, and publish
only the public key in the record this tool builds.
Does this generate a DKIM key pair? +
No. For security, key generation stays with your mail platform. This tool builds the DNS record name and template, then you paste in the public key it emits.
Where do I publish a DKIM record? +
Publish it as a TXT record at selector._domainkey.yourdomain.com, using the selector your mail platform assigns.
RSA or Ed25519? +
RSA (2048-bit) is universally supported. Ed25519 is shorter and modern but not supported by every receiver, so it is usually published alongside an RSA key.