FREE EMAIL SECURITY TOOL
DKIM Record Generator
Generate an RSA DKIM key pair and the DNS TXT record needed to publish the public key for your email domain.
This tool generates sensitive private-key material. The private key must be protected and should never be published in DNS, shared publicly, committed to source control, or stored in unsecured systems.
Enter the domain that will sign outgoing email.
The selector becomes part of the DKIM DNS record name, such as
default._domainkey.
2048-bit RSA is the practical default for most DKIM deployments.
SHA-256 is used for the generated DKIM configuration.
SECURITY
Key generation should leave as little trace as possible
The DKIM generation endpoint should never persist private keys, include them in application logs, analytics, audit payloads, exception telemetry, response caching, or request-response tracing.