DKIM record generator

Your mail system creates the DKIM key pair and shows you a public key. Paste it here to get the DNS record and the host name to publish it at.

DKIM record builder

Your mail system creates the key pair. This turns the public key it shows you into the DNS record. Never paste a private key anywhere.

SelectorThe name your mail system gives the key, e.g. s1 or google.Public keyStarts with MIIB... or is wrapped in BEGIN PUBLIC KEY lines. Mark as testing (t=y). Remove it once signing works.

Paste a public key to see the record.

Keep your domain on your radar

A one-time check shows today. Pistos DMARC reads the reports mailbox providers send about your domain and tells you when a sender fails or a record changes.

Create an account

Questions

Most services give me a CNAME, not a key. Do I need this?

No. Services that manage DKIM for you usually ask for CNAME records you copy as shown. This builder is for when you hold the public key yourself.

Is anything stored?

No. The record is built in your browser.

About this tool

What it builds

A TXT record of the form v=DKIM1; k=rsa; p=<public key>, to publish at selector._domainkey.yourdomain.

Selector and key size

The selector is the name your mail system gives the key. Use 2048-bit keys where the system allows, and rotate keys on a schedule.

Never paste a private key

Only the public key goes in DNS. A private key must stay inside your mail system.