DKIM Record Generator

Generate the DNS TXT record for DKIM email authentication. Paste your public key and configure your selector.

Domain

DKIM Selector

Common selectors: default, google, selector1, s1

Key Type

Public Key

Generated DKIM Record

DNS Name (TXT)

default._domainkey.example.com

Record Value

v=DKIM1; k=rsa; p=<your-public-key>

Validate this record

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every message you send. The receiving server verifies it against a public key published in your DNS, proving the message really came from your domain and was not altered in transit.

How DKIM helps deliverability

DKIM is one of the three authentication checks (with SPF and DMARC) that mailbox providers use to decide whether to trust your mail. A valid DKIM signature is required to pass DMARC by alignment, and Google and Yahoo now require it for bulk senders.

Using the generated record

Publish the generated public key as a TXT record at selector._domainkey.yourdomain.com, keep the matching private key in your sending platform, and confirm the signature passes before depending on it.

Frequently asked questions

What is a DKIM selector?

A selector is a label (e.g. "google" or "s1") that tells receivers which DKIM public key to use. It lets you publish multiple keys and rotate them safely.

Is DKIM required?

For bulk senders to Gmail and Yahoo, yes. For everyone, DKIM significantly improves trust and is needed to pass DMARC by DKIM alignment.

How long should my DKIM key be?

Use at least a 2048-bit RSA key where your provider supports it; 1024-bit is the minimum but weaker.

Why is my DKIM failing?

Common causes are a mismatched selector, the record split or truncated in DNS, or the message being modified by a mailing list after signing. Use an email header analyzer to see the exact DKIM result.