DKIM Record Generator

Easily generate DKIM records by enter a selector and your domain name. We generate the public/private key pair for your and show you the corresponding DNS record.

What is DKIM

DKIM (DomainKeys Identified Mail) lets mail senders cryptographically sign outgoing messages so recipients can verify they really came from you and weren’t tampered with.

A DKIM selector is a short name that helps receiving mail servers find the correct DKIM record for your domain. When you send an email, your mail system signs it with DKIM. The selector tells other servers where to look in your DNS for the public key to verify the signature. You can choose any name for the selector, like default, mail, or service-x etc. Just make sure the selector you use matches the DNS record you create.

We do not store or log any information you fill in on this website. We only ask your DKIM selector and domain so we can show you how the DNS-record looks like. If you want, you can just fill in some random data, or you can run this locally with OpenSSL:

### Generate private key ###
openssl genpkey -algorithm RSA -out private.pem -pkeyopt rsa_keygen_bits:2048

### Generate public key ###
openssl pkey -in private.pem -pubout -out public.pem

### Strip headers/newlines for DNS record ###
openssl pkey -pubin -in public.pem -outform DER | openssl base64 -A; echo