Generate Your Domain’s DKIM Record

Build a valid DKIM TXT record for your domain. Choose RSA or Ed25519, enable testing flags, and create a DNS-ready DKIM entry in seconds.

🚀 Step 1 : Enter Domain, Selector & Options

Explore more tools: SPF Checker • SPF Generator • DKIM Checker • DMARC Checker • IP Blacklist Checker

📘 DKIM Generator — Frequently Asked Questions

A DKIM record is a DNS TXT entry containing your domain’s public key. It allows mail servers to verify that emails are not altered and originate from an authorized sender.

It constructs an RFC 6376–compliant DKIM record based on your chosen algorithm, selector, and key size. You can also enable flags for testing and service types.

RSA 2048-bit is widely compatible and secure. Ed25519 produces shorter keys and faster verification, suitable for advanced setups.

Publish it in your DNS under selector._domainkey.example.com. Then verify it using the DKIM Checker.

The t=s flag marks a DKIM record for testing. The s= flag specifies which message types it applies to (e.g., email or all).

📨 Publish Your DKIM Record the Right Way

After generating your DKIM record, add it as a TXT entry under your selector host. Only one DKIM record per selector should exist to prevent validation conflicts.

Use the DKIM Checker to confirm that your DNS is resolving the public key correctly, and combine it with SPF and DMARC for full authentication alignment.

🧩 Why Use MailTested’s DKIM Generator

MailTested provides key validation, syntax checks, and immediate DNS-ready output. It supports RSA and Ed25519 algorithms, optional testing flags, and ensures your TXT record passes every major provider’s DKIM verification test.

📄 Common DKIM Record Examples

RSA 2048-bit: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQ...

Ed25519 Example: v=DKIM1; k=ed25519; p=MCowBQYDK2VwAyEAyVb9Lz...

Testing Mode (t=s): v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqG...