Log in
Generator

DKIM generator

Generate a DKIM key pair in your browser: ready DNS record and private key to download. The private part never leaves your device.

The key is created in your browser. The private part never leaves your device, we do not see it and store nothing.

How DKIM works

Your mail server signs every email with a private key. You publish the matching public key in DNS at selector._domainkey.your-domain. The recipient uses it to check that the email comes from you and was not changed on the way.

  • Use a separate selector for each sending service and rotate the key from time to time, for example once a year.
  • Sending services such as Google Workspace or Microsoft 365 generate the key themselves, you do not need this generator there.

Learn more: Finding your DKIM selector

FAQ

How do I create a DKIM key?

Enter your domain and a selector and generate the key pair. You get the ready TXT record for your DNS and the private key to download, which your mail server needs for signing.

Is it safe to generate the key online?

The key is created in your browser. The private part is not sent to us and not stored. Still: keep it only on your mail server and do not pass it on.

1024 or 2048 bits?

2048 bits are the standard today and more secure. Use 1024 bits only if your DNS provider does not accept longer records.