DKIM Record Generator
Generate your DKIM DNS record in seconds. Authenticate your emails and improve deliverability.
Generated DKIM Record
Your DKIM keys are ready - add the public key to DNS
IMPORTANT: Keep your private key secret!
Download and store it securely. Never share it publicly or commit it to version control.
Warnings:
Next Steps:
- Copy the DNS hostname and value above
- Log in to your DNS provider (e.g., Cloudflare, GoDaddy, Namecheap)
- Add a new TXT record with the hostname and value
- Wait for DNS propagation (usually 15-60 minutes, can take up to 48 hours)
- Verify your DKIM record using our DKIM Lookup Tool
- Configure your email server to sign emails with your private key
About DKIM
What is DKIM?
DKIM (DomainKeys Identified Mail) is an email authentication method that allows the receiver to check that an email was sent and authorized by the owner of that domain. This is done by adding a digital signature to each outgoing email.
How DKIM Works
- Your email server signs outgoing emails with a private key
- You publish the public key in your DNS as a TXT record
- Receiving servers use the public key to verify the signature
- If the signature is valid, the email is authenticated
DKIM Record Tags
- v (version)
- DKIM version, must be "DKIM1"
- k (key type)
- Type of encryption key (rsa or ed25519, default: rsa)
- p (public key)
- Base64-encoded public key used to verify signatures (required)
- s (service type)
- Type of service (email or *, default: *)
- t (flags)
- Flags: y=testing mode, s=strict mode
- n (notes)
- Human-readable notes about the key
Security Best Practices:
- Use RSA keys with at least 2048 bits (4096 recommended)
- Keep your private key secure and never share it
- Rotate keys periodically (every 6-12 months)
- Start with testing mode (t=y) before enforcing
- Monitor your DKIM reports regularly
Related Tools
Ready for Complete Email Authentication?
Implement DKIM, DMARC, and SPF together with our comprehensive email security platform. Monitor all authentication protocols in one place.
No credit card required • Free monitoring for 14 days • Setup in 5 minutes