Gerador de Registro DKIM

Gere o registro DNS TXT para autenticação DKIM. Cole sua chave pública e configure seu seletor.

Domínio

Seletor DKIM

Seletores comuns: default, google, selector1, s1

Tipo de Chave

Chave Pública

Registro DKIM Gerado

Nome DNS (TXT)

default._domainkey.example.com

Valor do Registro

v=DKIM1; k=rsa; p=<your-public-key>

Validate this record

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every message you send. The receiving server verifies it against a public key published in your DNS, proving the message really came from your domain and was not altered in transit.

How DKIM helps deliverability

DKIM is one of the three authentication checks (with SPF and DMARC) that mailbox providers use to decide whether to trust your mail. A valid DKIM signature is required to pass DMARC by alignment, and Google and Yahoo now require it for bulk senders.

Using the generated record

Publish the generated public key as a TXT record at selector._domainkey.yourdomain.com, keep the matching private key in your sending platform, and confirm the signature passes before depending on it.

Perguntas frequentes

What is a DKIM selector?

A selector is a label (e.g. "google" or "s1") that tells receivers which DKIM public key to use. It lets you publish multiple keys and rotate them safely.

Is DKIM required?

For bulk senders to Gmail and Yahoo, yes. For everyone, DKIM significantly improves trust and is needed to pass DMARC by DKIM alignment.

How long should my DKIM key be?

Use at least a 2048-bit RSA key where your provider supports it; 1024-bit is the minimum but weaker.

Why is my DKIM failing?

Common causes are a mismatched selector, the record split or truncated in DNS, or the message being modified by a mailing list after signing. Use an email header analyzer to see the exact DKIM result.