Gugu
DKIM key generator
EN
← All tools

Create a record

DKIM key generator

Create a secure key pair to sign outgoing email.

The key is created in your browser. Never share its private half.

When should you use this tool?

Most services such as Google Workspace, Microsoft 365 and Brevo generate the DKIM key in their own panel and give you a ready DNS record; you do not need this tool then. Use it if you run your own mail server (such as Postfix or OpenDKIM) or if a service asks you to bring your own key.

The key is generated only in this browser and never sent to our server. The private key is lost when you close or refresh the page, so download it now and keep it in a password manager or on your server.

Generated with gugu.tr. Results reflect the state at the time of the test.

What should I do?

  1. 1Enter your domain and a short selector (key name); keep the 2048-bit size.
  2. 2Generate the key and add the public key to your DNS panel.
  3. 3Download the private key and enter it in your mail server or sending service.

Never put the private key in DNS; only the public key (the record below) goes into DNS.

Before using this DKIM key

This tool creates a DKIM key pair in your browser. The public key goes in DNS; the private key lets your sending service sign messages.

The private key is secret. Do not share it in email, chat, or public files. If it is lost, create a new key.

What should I do?

  1. Create a 2048-bit key when possible and choose a distinctive selector for it.
  2. Add the public key as a TXT record at selector._domainkey; your DNS panel may require a long value to be split into chunks.
  3. Enter the private key only in your sending server or email service, then send a test email and check DKIM.

Frequently asked questions

Should I add the private key to DNS?

No. Only the public key belongs in DNS. The private key stays secret and is stored only by the system that creates the signature.

Can I change the selector?

Yes. Publish a new DNS record for the new selector and update the sending configuration to use the same selector.

When should I rotate the key?

Rotate it regularly, or immediately if you suspect that the private key has been exposed.