Ultra Web Hosting

DKIM Record Generator

Generate a properly formatted DKIM DNS record. Paste your public key from your email provider and get a ready-to-add TXT record with the correct selector hostname.

DKIM Record Generator

Build a properly formatted DKIM DNS record for your domain. Enter your selector name, paste the public key from your email provider, and get a ready-to-add TXT record. DKIM cryptographically signs outgoing emails so receiving servers can verify they were sent by an authorized server and were not tampered with in transit.

Build Your DKIM Record
Domain & Selector
e.g. google, default, selector1, k1, s1
Public Key
Paste the public key provided by your email service. You can paste the raw base64 key, the full PEM block, or just the key data. Headers, footers, and line breaks will be stripped automatically.
Key Settings
Generated DKIM Record
Record Type
TXT
Host / Name
default._domainkey
Value
(shown below)
v=DKIM1; k=rsa; p=
click to copy
Key Size (est.)
Record Length
Where to Get Your DKIM Key
DKIM keys are generated by your email provider. Below are the typical selectors and where to find the public key for common providers. You will paste the public key into the field above.
ProviderTypical SelectorWhere to Find Key
Google WorkspacegoogleAdmin Console → Apps → Gmail → Authenticate Email
Microsoft 365selector1, selector2Defender portal → Email & Collaboration → Policies → DKIM
cPaneldefaultcPanel → Email Deliverability → Manage (auto-configured)
Amazon SESs1, s2SES Console → Identities → DKIM (uses CNAME, not TXT)
Mailchimpk1Account → Domains → Authentication
SendGrids1, s2Settings → Sender Authentication → Domain (uses CNAME)
PostmarkpmSender Signatures → DNS Settings
Zoho MailzmailAdmin → Mail Settings → DKIM
MailgunmgSending → Domains → DNS Records

About This Tool

DKIM records contain a public key that receiving mail servers use to verify the cryptographic signature on your outgoing emails. The key itself is generated by your email provider (Google, Microsoft, cPanel, etc.), but you still need to publish it in DNS as a properly formatted TXT record under the correct selector hostname. This tool takes the public key from your provider and formats it into a complete DNS record with the right version tag, key type, and optional flags. It also estimates the key size and warns about records that may be too long for older DNS providers.

How to Use

Enter your domain name and DKIM selector (the selector name comes from your email provider — see the reference table for common ones). Paste the public key your provider gave you into the key field. The tool strips PEM headers, whitespace, and line breaks automatically, then assembles the complete TXT record. The hostname field shows exactly where to create the DNS record (selector._domainkey.yourdomain.com). Click the generated record to copy it.

Tips & Best Practices

You do not generate DKIM keys yourself — your email provider creates the key pair and gives you the public key to publish in DNS. For Google Workspace, the selector is typically "google" and you find the key in Admin Console under Apps → Gmail → Authenticate Email. For Microsoft 365, selectors are "selector1" and "selector2" and the key is in the Defender portal. For cPanel servers, DKIM is configured automatically under Email Deliverability. If your provider gives you a CNAME to add instead of a TXT record, they are hosting the key for you and you do not need this tool.

Need reliable hosting? These free tools are brought to you by Ultra Web Hosting. Fast, secure shared and reseller hosting with 24/7 expert support. View hosting plans →