DKIM Key Generator
Generates a real RSA key pair entirely in your browser — the public half becomes a DKIM TXT record to publish, the private half is yours to install. Nothing is sent to our servers.
Before you use this: if your mail comes from Google Workspace or Microsoft 365, they already generate and manage your DKIM key for you — don't replace it. Use this if you run your own mail server, or your sending service lets you bring your own DKIM key (e.g. Amazon SES, a custom SMTP setup).
Your domain (optional — just for showing the exact host to publish under)
Selector — a short name for this key (you'll reference it in your mail software's DKIM setup)
Generated entirely in your browser using the Web Crypto API — the private key never leaves your device.
Not sure what DKIM actually does first? Check your domain's current setup free to see where you stand.