DKIM Record Generator (RSA and Ed25519)
Use this DKIM Record Generator to create DKIM records for your domain. Both RSA and Ed25519 keys can be created.
Note
|
No domain or selector information is submitted to our servers. A secure request is made to obtain a suitable private key and raw public key only. This key information is displayed and made available for download in a DKIM-compatible format using client-side JavaScript. No key data is stored on the server. |
Ed25519 keys for DKIM signing were introduced in RFC 8463 and are currently less widely supported than RSA keys. While an increasing number of e-mail providers will validate these signatures, you should sign e-mail using both RSA and Ed25519 keys until the latter is more widely supported.
Many online DKIM record verification sites are also unable to verify Ed25519 DNS records or signatures. Matthäus Wander has an excellent DKIM Test page that can verify e-mail signed using both RSA and Ed25519 keys. It will also verify multiple DKIM-Signatures in an e-mail, so it’s perfect for testing e-mail signed with multiple keys. Don’t rely on what GMail tells you as they don’t show the results for every signature.
If you are looking for an SMTP relay provider that either allows you to use your own DKIM keys, or one that does the hard work for you, see our current list of Recommended SMTP Providers.