DKIM Record Generator
DKIM adds a tamper-proof digital signature to emails. This tool generates the public DNS record you need after creating your public/private key pair.
Publish this DNS Record:
Record Name/Host:
Record Type:
TXT
Record Value:
What is a DKIM Record?
DKIM (DomainKeys Identified Mail) provides a way to verify that an email was truly sent from its claimed source and that its contents have not been tampered with in transit. It works by adding a digital signature to the headers of every email you send.
This signature is generated using a private key kept secret on your mail server. The corresponding public key is published in your DNS in a DKIM record. Receiving mail servers fetch this public key to validate the signature. A successful DKIM validation is a strong signal of legitimacy and is crucial for passing DMARC.
DKIM Generator FAQs
What is a DKIM selector?
A DKIM selector is a unique identifier you choose that helps distinguish between different DKIM keys for the same domain. It allows you to use separate keys for different mail streams (e.g., one for marketing emails, another for transactional emails). It becomes part of the DNS record name, like `selector._domainkey.yourdomain.com`.
Can I have multiple DKIM records?
Yes, you can and often should have multiple DKIM records. Each unique sending service (like Google Workspace, Mailchimp, SendGrid) will provide its own DKIM key and selector. You need to create a separate DKIM record in your DNS for each service to properly authenticate all your email.