DKIM Record Builder

Build a valid DKIM DNS TXT record step by step

selector._domainkey.yourdomain.com

v=DKIM1; s=email; p=YOUR_PUBLIC_KEY_HERE

Add a TXT record with the hostname above and the record value as its content.

The selector identifies this specific DKIM key. Common values include default, google, s1, or a date like 202604.

Paste your DKIM public key below. PEM headers and whitespace will be stripped automatically.

k=rsaRSARecommended

The most widely supported key type. Use this unless you know your recipients support Ed25519.

k=ed25519Ed25519

Smaller keys with strong security, but not yet universally supported.

SHA-256 onlyRecommended

The modern standard. Recommended for all new configurations.

SHA-1 only

Legacy algorithm. Use only for backward compatibility.

Both (SHA-1 + SHA-256)

Accept signatures using either algorithm.

s=emailEmail onlyRecommended

This key is used for email signing only. The standard choice.

s=*All services

This key may be used for any service, not just email.

t=yTesting mode

Signals that this domain is testing DKIM. Verifiers should treat signed messages as unsigned during testing.

t=sStrict alignment

The signing domain (d= in the signature) must exactly match the From domain. Subdomains are not allowed.