🔑 DKIM Generator
⚡ Output
ℹ️ About DKIM Generator
The DKIM Generator is a technical guide and command-line utility helper designed to assist system administrators in implementing DomainKeys Identified Mail (DKIM). Because DKIM relies on a private/public key pair, the actual keys should always be generated in a secure environment—ideally on your own mail server or a local machine.
This tool provides the exact OpenSSL commands needed to generate a secure 2048-bit RSA key pair. It also shows you how to format the resulting public key into a DNS TXT record. By following this standardized process, you ensure that your email signatures are cryptographically sound and that receiving servers can successfully verify your domain's identity.
📖 How to use DKIM Generator
- 1. Enter your domain name and preferred selector (e.g., 'default' or 'mail').
- 2. Click 'Run Tool' to generate your custom instructions.
- 3. Run the provided OpenSSL commands in your server's terminal.
- 4. Copy the public key into the DNS record format shown in the 'DNS Record Hint' section.
- 5. Publish the TXT record in your domain's DNS settings.
❓ Frequently Asked Questions
Why can't this tool generate the keys for me?
For security reasons, your 'Private Key' should never be generated on or transmitted to a third-party website. Generating it locally ensures that only you have access to the secret key used to sign your emails.
What is a 2048-bit key?
It is the current industry standard for RSA key strength. Older 1024-bit keys are now considered vulnerable and are being phased out by many providers.
What happens after I publish the DNS record?
Once published, you must configure your mail server software (like Postfix, Exim, or Exchange) to use the Private Key to sign outgoing messages.
🔗 Related Email Tools
Email Validator
Verify the format and domain mail servers (MX) of an email address.
MX Record Lookup
Find the Mail Exchange (MX) records for a domain.
SPF Record Checker
Check if a domain has a valid Sender Policy Framework (SPF) record.
DKIM Checker
Verify a domain's DomainKeys Identified Mail (DKIM) record using a selector.
DMARC Checker
Lookup a domain's Domain-based Message Authentication, Reporting, and Conformance (DMARC) record.
Email Header Analyzer
Paste raw email headers to analyze the sender, route, and authentication details.