Generate a 2048-bit DKIM key pair and DNS record for your sending domain in seconds. Keys are \ created in your browser — free, with no signup.
Selector
Domain
Generate a 2048-bit DKIM key pair and DNS record for your sending domain. Keys are created in your browser — nothing is uploaded.
Enter selector & domain
Choose a selector name and your sending domain.
Generate keys
A 2048-bit RSA key pair is created in your browser.
Publish the record
Add the TXT record at selector._domainkey on your domain.
Install the key
Add the private key to your mail server or sending platform.
DKIM proves your emails genuinely came from your domain and weren't tampered with in transit. Mailbox providers weigh it heavily, so a missing or broken DKIM record quietly hurts deliverability.
This generator creates a real 2048-bit key pair and the exact DNS record you need — all in your browser, so the private key never leaves your machine.
DKIM works best alongside SPF and DMARC. Together they authenticate your domain and build trust with Gmail, Outlook and Yahoo.
Once your domain is authenticated, verify your recipients with Emailchaser's free email verifier so low bounces keep that hard-won reputation intact.
What is a DKIM record?
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your emails. You publish a public key as a DNS TXT record, and your mail server signs outgoing mail with the matching private key. Receivers verify the signature to confirm the message really came from your domain and wasn't altered.
How do I generate a DKIM key?
Enter a selector (like 'default') and your domain, then click generate. The tool creates a 2048-bit RSA key pair in your browser. Publish the TXT record in DNS and install the private key in your mail server or sending platform.
Is it safe to generate DKIM keys in the browser?
Yes. The key pair is generated locally using your browser's built-in cryptography and is never sent to any server. That said, treat the private key as a secret and install it securely.
What selector should I use?
Any label works; 'default', 'google', 'k1' or a date like 's2026' are common. The selector becomes part of the DNS host: selector._domainkey.yourdomain.com.
Address: 151 Calle de San Francisco San Juan, Puerto Rico
Email: support@emailchaser.com
Product
Cold Email SoftwareEmail FinderCampaignsSales CRMLead FinderEmail AccountsEmail VerificationEmail VerifierAPI documentationFree tools
All free toolsEmail PermutatorCompany Email FormatEmail ExtractorEmail CheckerSpam Word CheckerSPF Record GeneratorFollow-Up GeneratorOut of Office Generator© Copyright 2026 Emailchaser