Free DKIM key pair generator
DKIM generator — create keys and a DNS record in your browser.
Create a DKIM record and 2048- or 4096-bit RSA key pair, copy the DNS-ready public TXT, and export the private PEM locally. No account required.
Empty
Enter your domain and selector, then generate a DKIM key pair for DNS and ESP setup.
How to use this tool
Make one small, informed decision.
- 1.Enter your sending domain and a selector name (often default or a provider-specific value).
- 2.Choose a key size and generate the RSA key pair locally in your browser.
- 3.Publish the TXT record at selector._domainkey.yourdomain.com, then upload the private PEM to your ESP.
What the result means
After generation: publish the TXT on selector._domainkey.yourdomain.com, upload the private PEM to your ESP, and keep the selector and key pair in sync. Long records may need the quoted split form your DNS panel provides.
Limitations and privacy
Keys are generated with Web Crypto in your browser. The private key never leaves this page unless you copy or download it.
Go deeper
Why this matters
Domain setup is part of safer outbound.
What DKIM does
DKIM adds a cryptographic signature to outbound mail. Receivers verify it against the public key you publish in DNS.
Generated locally
Keys are created with Web Crypto in your browser. The private key never leaves this page unless you copy or download it.
Two steps after generation
Publish the TXT on selector._domainkey.yourdomain.com, then upload the private PEM to your ESP. Every DKIM record is longer than one DNS string, so the generator also gives you the quoted form for providers that do not split it for you.
Related tools
Common questions
DKIM Record Generator FAQ
Which key size should I use?
2048 bits is the common default. Use 4096 if your ESP and DNS provider support it — its record is roughly twice as long, and some panels truncate very long TXT records.
Does this configure my ESP?
No. You must add the private key in your sending provider and publish the public TXT in DNS yourself.
Can I reuse an existing selector?
Each selector needs a matching key pair. If you rotate keys, use a new selector or update both DNS and the ESP together.
Next step
Keys ready. Ready to run outreach you approve first.
OmniReach drafts personalized LinkedIn and email sequences. You review the first touch — nothing sends without a deliberate launch.
Free forever tier · No credit card required · Setup in 2 minutes