emonster

Free Local utilities

DKIM key generator

Generate local RSA-2048 or RSA-4096 DKIM keys with plain TXT or zone-file output. Copy public DNS data separately and download the private PEM key securely. No DNS publishing.

Bookmark

Use your browser’s bookmark command to save this page. It saves the tool link, not your inputs or results.

Your inputs

Runs in your browser. Inputs and results are not uploaded or saved by this tool. Copy or download only what you intend to keep.

Use an ASCII domain such as example.com, without a scheme or path (up to 253 characters).

Use 1–63 letters, digits, hyphens or underscores; begin and end with a letter or digit.

Options

No DNS publishing, lookup, domain ownership check or email-delivery test occurs. Check your mail provider’s key format and rotation requirements. Copied/downloaded private keys remain your responsibility.

Your result

Ready.

Your result will appear here

Complete the inputs and run the tool. You can load a safe example to get started.

Support

Sources

Sources reviewed:

How it works

Web Crypto creates a local RSA-2048 or RSA-4096 pair. Private output is PKCS#8 PEM; the public SPKI key forms selector._domainkey.domain TXT data. Single-value and quoted zone-file chunk presentations contain the same TXT value. Publish only public data; configure mail signing separately.

Assumptions and limitations

No DNS publishing, lookup, domain ownership check or email-delivery test occurs. Check your mail provider’s key format and rotation requirements. Copied/downloaded private keys remain your responsibility.

How to use this tool

Enter an ASCII domain and selector, then Generate. Keep the private key secret; publish only the shown TXT record and configure signing in your mail server separately.

Worked example

Demonstration data only. Loading an example replaces the inputs but does not run the tool.

example.com
mail
mail._domainkey.example.com

Frequently asked questions

What should I check before using this result?

No DNS publishing, lookup, domain ownership check or email-delivery test occurs. Check your mail provider’s key format and rotation requirements. Copied/downloaded private keys remain your responsibility.

Are my inputs or results saved automatically?

No. Processing stays in this browser and leaving the page clears the tool state. Copied or downloaded results remain under your control. Page-loading and privacy controls are described in the Privacy Policy.

Processing and privacy

No. Processing stays in this browser and leaving the page clears the tool state. Copied or downloaded results remain under your control. Page-loading and privacy controls are described in the Privacy Policy.

Privacy Policy

Help

Enter an ASCII domain and selector, then Generate. Keep the private key secret; publish only the shown TXT record and configure signing in your mail server separately.

Runs in your browser. Inputs and results are not uploaded or saved by this tool. Copy or download only what you intend to keep.

Support