DKIM Key & Record Generator | iN2 Tools

Generate a DomainKeys Identified Mail (DKIM) cryptographic key pair and the corresponding DNS TXT record value.

DKIM Key Generator & DNS Record Builder

Generate secure RSA (2048-bit) or Ed25519 public/private key pairs for DomainKeys Identified Mail (DKIM). Publish your public key in DNS TXT records to cryptographically sign outgoing mail and prevent forgery.

DKIM Key & Record Generator

Generate a DomainKeys Identified Mail (DKIM) cryptographic key pair. Publish the public key in your DNS TXT record to sign outgoing emails and prevent spoofing.

Understanding DomainKeys Identified Mail (RFC 6376)

DomainKeys Identified Mail (DKIM) provides a way to validate a domain name identity that is associated with a message through cryptographic authentication defined in RFC 6376.

How DKIM Signing Works

  1. Key Pair Generation: The domain administrator creates an asymmetric RSA or Ed25519 key pair.
  2. DNS Public Key Publishing: The public key is published in a DNS TXT record at selector._domainkey.domain.com.
  3. Header Signing: The outbound Mail Transfer Agent (MTA) uses the private key to generate a digital signature header (DKIM-Signature) for body and selected message headers.
  4. Receiver Verification: Recipient mail servers fetch the public key from DNS and verify that the signature matches the message body without modification in transit.

Related Email Security Tools