DKIM Generator
Generate DKIM DNS TXT records from a public key. Supports RSA and Ed25519 keys with testing mode for safe rollout.
Try DKIM Generator →What It Does
The DKIM (DomainKeys Identified Mail) Generator creates a valid DKIM TXT record for your domain's DNS. DKIM cryptographically signs outgoing email so receiving servers can verify the message hasn't been tampered with and really came from your domain.How to Use It
- Navigate to DNS Tools → DKIM Generator from the top menu.
- Enter your domain name.
- Enter the DKIM selector assigned by your email provider (e.g., "google" for Google Workspace).
- Click a provider button to auto-fill the common selector, or type your own.
- Select the key type (RSA for maximum compatibility, Ed25519 for modern setups).
- Paste the public key from your email provider. Headers (BEGIN/END) are optional.
- Optionally enable testing mode (t=y) for initial rollout.
- Click Generate DKIM Record.
- Copy the record and publish it as a TXT record at
selector._domainkey.yourdomain.com.
Finding Your DKIM Public Key
- Google Workspace: Admin Console → Apps → Gmail → Authenticate Email → Generate New Record.
- Microsoft 365: Defender Portal → Email & Collaboration → Policies → DKIM.
- SendGrid: Settings → Sender Authentication → Domain Authentication.
- Mailchimp: Account → Settings → Verified Domains → View DKIM Settings.
Each provider gives you a public key to paste into this tool.
Use Cases
- Email authentication: Prove that email from your domain hasn't been forged or modified.
- DMARC compliance: DKIM is one of two mechanisms DMARC uses to verify email (the other is SPF).
- Deliverability: Email with valid DKIM signatures is less likely to be flagged as spam.
- Brand protection: Prevent attackers from sending convincing phishing emails using your domain.