DKIM Record Builder and Inspector
Generate and inspect DKIM DNS records in your browser with selector guidance.
Build a DKIM TXT record name and value from a selector, domain, and public key, or inspect an existing DKIM value before publishing it. Everything stays in your browser: this tool does not query DNS, upload keys, or verify a live email signature.
Selectors separate keys for different mail systems or rotations.
The DNS owner name becomes selector._domainkey.domain.
Paste only the public key material supplied by your mail provider. Do not paste private keys.
How it works
DomainKeys Identified Mail uses a DNS TXT record under selector._domainkey.example.com to publish the public key and policy tags that receivers use while checking signed mail. This tool formats the owner name, DKIM tag list, TXT wrapping preview, and a readable inspection report for change tickets or DNS provider forms.
The selector should identify a specific sending platform, region, or rotation period so old and new keys can overlap safely during changes. Keep selectors short, stable, and ASCII-only. The public key value is normally provided by your mail service and belongs in the p= tag without PEM headers or private-key material.
This is a local syntax and publishing aid. It cannot verify a live signature, prove the DNS record has propagated, confirm key ownership, or check provider-specific TXT limits. Review the generated record with your email provider before replacing an active DKIM key.
Related tools
Use the SPF Record Builder and Inspector for sender authorization, the DNS Zone File Validator to review zone snippets, and the Email Header Parser to inspect DKIM, SPF, and DMARC results from received messages.
