ToolSci.com

🔑 DKIM Generator

Generate instructions and commands to create DKIM keys for your domain.

ℹ️ About DKIM Generator

The DKIM Generator is a technical guide and command-line utility helper designed to assist system administrators in implementing DomainKeys Identified Mail (DKIM). Because DKIM relies on a private/public key pair, the actual keys should always be generated in a secure environment—ideally on your own mail server or a local machine.

This tool provides the exact OpenSSL commands needed to generate a secure 2048-bit RSA key pair. It also shows you how to format the resulting public key into a DNS TXT record. By following this standardized process, you ensure that your email signatures are cryptographically sound and that receiving servers can successfully verify your domain's identity.

📖 How to use DKIM Generator

  1. 1. Enter your domain name and preferred selector (e.g., 'default' or 'mail').
  2. 2. Click 'Run Tool' to generate your custom instructions.
  3. 3. Run the provided OpenSSL commands in your server's terminal.
  4. 4. Copy the public key into the DNS record format shown in the 'DNS Record Hint' section.
  5. 5. Publish the TXT record in your domain's DNS settings.

Frequently Asked Questions

Why can't this tool generate the keys for me?

For security reasons, your 'Private Key' should never be generated on or transmitted to a third-party website. Generating it locally ensures that only you have access to the secret key used to sign your emails.

What is a 2048-bit key?

It is the current industry standard for RSA key strength. Older 1024-bit keys are now considered vulnerable and are being phased out by many providers.

What happens after I publish the DNS record?

Once published, you must configure your mail server software (like Postfix, Exim, or Exchange) to use the Private Key to sign outgoing messages.

🔗 Related Email Tools