TXT record name
ToolsDKIM generator
DKIM generator
TXT record value
Split version, each part at most 255 characters (for older DNS panels)
Private key
Keep the private key on your mail server only. Reloading the page loses it, so copy or download it now.
How to use it
- Add the TXT record to the domain’s DNS with the name and value above.
- Install the private key on your mail server (IceWarp, Postfix/OpenDKIM, Plesk…) using the same selector.
- Wait a few minutes for DNS, then confirm with Email check.
Make a DKIM key for your mail domain
DKIM is a digital signature added to outgoing mail so receivers can tell it really came from you. This tool makes the key pair in your browser: the TXT record goes into DNS, the private key goes onto your mail server.
Is the private key sent to our server?
No. The key pair is made with WebCrypto on your own device. Our server never receives, stores or logs it. Copy or download the private key right away, because reloading the page loses it.
2048 or 1024?
Use 2048. Some DNS panels cap each TXT string at 255 characters, so a 2048 key must be split; the tool prepares the split version. Pick 1024 only if your DNS refuses long records.
What is a selector and what should I call it?
A selector is a label that lets one domain hold several DKIM keys at once. The default is default. When you rotate keys, give the new one a dated name such as 2026-11 so the old key keeps working during the switch.