DKIM Record Generator — selector._domainkey TXT Builder

Developer

A DKIM record generator formats a mail-service public key into a v=DKIM1 DNS TXT value and computes the selector._domainkey host where it should be published.

DKIM Record Generator

DKIM1

Runs in this browserInput is processed only in this browser. No DNS lookup, secret storage, or server transfer is performed.

Domain

Selector

Service tag (s=)

Hash tag (h=)

Public key (PEM or base64)

DKIM TXT record

What is it

DKIM (DomainKeys Identified Mail) lets a sending server sign mail and lets receiving servers verify that signature with a public key published in DNS. This tool strips PEM headers, footers, and whitespace from a public key, then builds the DKIM TXT value and host. It does not generate or store private keys; actual message signing must be configured in your mail provider or sending server.

DKIM host = selector._domainkey.domain, TXT = "v=DKIM1; k=rsa; p=publicKey"

How to use

1Get the DKIM selector and public key from your mail service.
2Enter the domain, selector, and public key.
3Publish the generated host and TXT value in DNS, then verify with a DKIM checker.

Reference

DKIM Record Generator — selector._domainkey TXT Builder Reference
Tag	Meaning
v=DKIM1	DKIM key record version
k=rsa	public-key algorithm
p=	base64 public-key body
	DNS TXT publishing location

Sources & standards

RFC 6376: DomainKeys Identified Mail (DKIM) - IETF
DNS TXT resource records - IETF
MDN Web Docs: Client-side web APIs - MDN Web Docs

FAQ

Should I paste a private key?

No. DNS publishes only the public key. The private key must stay with your mail server or provider and should not be pasted into this tool.

Is the public key sent to a server?

No. Public-key formatting runs entirely in your browser and does not perform DNS lookup or storage.

Will DKIM work after publishing this record?

Only if the sending server is also configured to sign outgoing mail with the same selector and private key.