Publish the public key; protect the private key
Publish the generated public value at <selector>._domainkey.<domain>. Configure the private key in the authorized sending system and keep it out of DNS, tickets and source control.
Free public generator
Generate a DKIM key pair with Web Crypto. The private key is shown once and never sent to MailConfig Pro.
Select an algorithm and enter a selector and domain for the DKIM record.
Generate the keys with this browser’s Web Crypto API. The private key is not sent to MailConfig Pro.
Publish the public value at the selector DNS name and configure the private key in your authorized sending system. Keep the private key secret.
The details
Publish the generated public value at <selector>._domainkey.<domain>. Configure the private key in the authorized sending system and keep it out of DNS, tickets and source control.
MailConfig Pro does not send the private key to its API and cannot enable DKIM signing on a third-party mail platform just by creating the DNS record.
DNS can vary by resolver and change over time. Verify important changes with your DNS provider and mail platform. Public DNS checks cannot see every private report or sending configuration.
Explore MailConfig ProGenerate a DKIM key pair with Web Crypto. The private key is shown once and never sent to MailConfig Pro.
No. This public tool is available without registration.