DKIM key generator
Create a DKIM key pair right in your browser. The private key is never sent to us — not even once.
Free and unlimited — runs privately in your browser.
What the DKIM Generator checks
- RSA 1024, 2048 or 4096 bits
- Ed25519 (RFC 8463)
- Generated with WebCrypto — offline-capable
- TXT record split into 255-char strings
- Private key as PEM download
- Selector naming advice
How it works
- 1
Enter your domain and a selector
- 2
Generate the key pair in your browser
- 3
Publish the TXT record, install the private key on your mail server
Frequently asked questions
Is it safe to generate DKIM keys online?
Here, yes: the keys are created by your browser's built-in cryptography (WebCrypto). Nothing is uploaded — you can even disconnect from the internet before clicking Generate.
Which key length should I choose?
2048-bit RSA. It is supported everywhere and recommended by all major providers. 4096 bits may exceed some DNS providers' TXT limits; Ed25519 is not yet verified by all receivers, so use it only in addition to RSA.