Free email DNS tool
DKIM record generator
Paste your DKIM public key and get a ready-to-publish selector._domainkey TXT record with the key cleaned for DNS.
The private key stays on your sending server or ESP — never paste it here or publish it in DNS.
Generated DNS TXT record
DKIM record
Publish the TXT value at the record name below in your DNS panel, then send a signed test message.
Validation: the p= tag is required. Paste your DKIM public key above to complete the record value.
default._domainkey.yourdomain.com
v=DKIM1; k=rsa; p=
When this helps
Use this generator when your mail server or ESP hands you a raw DKIM public key and you need the exact TXT record name and value to paste into your DNS panel.
Record checklist
- Record name:
selector._domainkey.yourdomain.com. - Public key must be one continuous base64 string — no line breaks.
- Keep the matching private key on the sending server only.
- Verify alignment: the d= domain should match your visible From domain.
Related tools
TempMailito angle
After publishing DKIM, send a signed test message to a temporary inbox and read the Authentication-Results header to confirm your key resolves and validates.
Create temporary inboxFAQ
DKIM generator questions
What is a DKIM selector?
The selector is the label you choose when generating the key pair, for example s1 or default. It becomes part of the DNS name (selector._domainkey.yourdomain.com) and the DKIM-Signature header, letting one domain publish multiple keys.
Which part of the key pair goes into DNS?
Only the public key goes into the p= tag of the TXT record. The private key never leaves your sending server or ESP — it is what signs outgoing messages.
Why is my public key wrapped over multiple lines?
Key files often wrap base64 across lines. This generator strips all whitespace and line breaks automatically, because DNS TXT values need the key as one continuous base64 string.