What is this?

This tool generates a cryptographic DKIM (DomainKeys Identified Mail) key pair. DKIM adds a digital signature to your emails, allowing receiving servers to verify that the email was genuinely sent by you and wasn't altered in transit.

Why is it recommended?

Prevents Spoofing: It makes it extremely difficult for malicious actors to impersonate your domain.
Boosts Deliverability: Major email providers (Gmail, Outlook) are significantly more likely to deliver your emails to the inbox (rather than spam) if DKIM is configured.
Privacy-First: This tool runs entirely in your browser. Your private key is never sent to a server.

What do I type in "Selector"?

The Selector is a simple label used to identify your public key in your DNS records. If you are starting fresh, default is the most common choice. If you already have a DKIM record and need a second one (e.g., for a different service), you might use something like mail or s1. Just remember which one you pick, as you will need it when configuring your email server.

Domain: Selector:

1. Private Key

Save this securely. Add this to your email server's signing configuration.

2. DNS Host (Name)

Create a TXT record in your DNS with this Name:

3. DNS TXT Value

Add this to the "Value" or "Content" field of the TXT record:

Why this is the best DKIM Record Generator

Browser-Native Security: Unlike online generators that process keys on their servers, this tool generates keys entirely within your browser using the native Web Crypto API. Your private key never leaves your device.
DNS Ready: It automatically formats your public key for DNS compatibility (splitting strings longer than 255 characters), ensuring your records are valid and ready to use.
Zero-Tracking: Designed for efficiency and privacy, this tool requires no external dependencies and performs no tracking.
Simple Workflow: By combining key generation with clear instructions and automated host naming, it eliminates the common configuration errors found in multi-step setups.