DKIM Generator

How to use the generator

1. Enter the domain for which you want to generate DKIM records.
2. Fill in DKIM selector, or leave it as is and default s1 will be used.
3. Select key size. 2048 is most commonly used.
4. Click Generate DKIM. Results appear in the table below.
5. Copy the results from the table, or click Download to get the generated keys and DNS configuration instructions. After you click Download, multiple files will be saved: the key files and an instructions file.

About this DKIM generator — free, fast & client-side

Generate a valid DKIM record in seconds. Enter your domain, choose a DKIM selector, select a key size (1024, 2048, or 4096 bits), and click Generate. For security, your private key is generated locally in your browser. You can also download your keys and step-by-step instructions for an even smoother setup.”

Why use a DKIM generator?

DKIM (DomainKeys Identified Mail) helps mail providers verify that your messages are authorized and unaltered by publishing your public key in DNS and signing outbound mail with your private key. This improves deliverability and helps enforce DMARC.

What it generates for you

• Hostname – e.g., selector._domainkey.example.com
• DKIM DNS TXT value – e.g., v=DKIM1; k=rsa; p=ABC...
• Public key
• Private key – generated locally in your browser
• One-click download file with keys + provider-specific instructions

DKIM setup instructions

1. Download your DKIM files – Click the Download keys & instructions button above the table with your generated DKIM. Inside the download bundle you’ll find 3 files:
   • Private key
   • Public key
   • DKIM setup instructions
2. Configure your DNS by following the instructions inside the DKIM setup file.
3. Verify the record using DKIM checker.

Setup notes

• DNS changes can take time to propagate (up to 24h, usually faster).
• If your provider rejects the value for length, keep it as one line (no quotes).

What is a DKIM selector?

DKIM selector is a short label (e.g., k1, default, google) that points to a specific DKIM public key in DNS. It appears in the record name as selector._domainkey.<your-domain> letting receivers fetch the right key to verify signatures. Selectors enables you to run multiple keys at once (by provider, environment, or rollout phase), rotate keys safely without downtime, and migrate services cleanly. You can learn more our article What is a DKIM selector.

FAQ

• What is DKIM?
  DKIM (DomainKeys Identified Mail) is an email authentication method that lets receivers verify an email was authorized by your domain and wasn’t altered in transit. It uses a private key to sign messages and a public key published in DNS to validate them. Learn more in our article on DKIM and its setup (Explained simply).
• Can I use more than one DKIM record?
  Yes. Many organizations maintain multiple selectors to support rolling key rotation without downtime.
• Do I still need DKIM if I have SPF or DMARC?
  Yes. DKIM complements SPF and is a core signal for DMARC alignment. Implementing all three improves deliverability and trust.
• Does DKIM improve deliverability?
  Yes. it helps mailbox providers authenticate your mail and is required by major providers for many senders. Also, it's highly reccomended to implement it alongside SPF and DMARC for best results.
• How do I check if DKIM is set up correctly?
  You can use our DKIM checker to validate the DNS record.