MailParse/Tools/DKIM Record Generator
Email Authentication

DKIM Record Generator

A DKIM record is a DNS TXT record that publishes the public key for your email sender so receiving servers can verify signed messages. Use this free generator to format a selector, domain, and public key into a copy-ready DKIM TXT record.

After publishing the record, confirm it with the DKIM Checker and pair it with SPF and DMARC. MailParse validates email authentication automatically for inbound messages.

Build your DKIM TXT record

Paste the public key from your email service. Keep the private key in the sending system.

PEM headers, quotes, line breaks, and whitespace are removed automatically.

Optional DKIM flags

How to publish this DKIM record

1

Enter the selector and domain

Use the selector from your email provider and the From domain you want to authenticate.

2

Paste the public key

Paste the DKIM public key only. The generator removes PEM headers, line breaks, quotes, and whitespace.

3

Copy the DNS values

Create a TXT record in your DNS provider using the generated host/name and value.

4

Verify propagation

After DNS updates propagate, check the selector with a DKIM checker before sending production mail.

Frequently asked questions

What is a DKIM record generator?

A DKIM record generator formats your selector, domain, and public key into the DNS TXT record that receiving mail servers use to verify signed email.

Where do I add a DKIM TXT record?

Add it in your DNS provider as a TXT record at selector._domainkey.yourdomain.com. Some DNS dashboards want only selector._domainkey in the host field.

Do I need to generate a private key here?

No. Your sending provider should generate or store the private key. This tool formats the public key into DNS so receivers can validate signatures.

Should I use a 1024-bit or 2048-bit DKIM key?

Use a 2048-bit RSA key when your DNS provider supports it. 1024-bit keys are weaker and should only be used when a provider cannot handle longer TXT values.

How can I test the DKIM record after publishing it?

After DNS propagation, use a DKIM checker with your selector and domain to confirm the TXT record is visible and has a valid public key.

Related tools

Validate inbound email automatically

MailParse receives inbound email, parses MIME into JSON, and checks authentication results before sending data to your webhook.

Get Started Free