# DKIM Record Generator

Create a valid DKIM record to add it to your DNS configuration and complete the second step of email authentication.

## How Do I Use EasyDMARC’s DKIM Record Generator?
- It’s easy! Our DKIM generator platform allows you to create a DKIM record and DKIM keys in just a few clicks. In the fields provided, specify your domain name, DKIM “selector” name, and the key length:
  - Name the selector something you can easily identify in the future.
  - Enter your domain name; this should match the visible “From” address domain.
  - Specify the key length. We support 1024, 2048, and 4096-bit length keys.
  - Once the DKIM record is generated, store the private key in your mail server configurations (with .pem file), and implement the public key in your DNS Zone.

## What is DKIM and How Does it Work?
DomainKeys Identified Mail or [DKIM](https://easydmarc.com/blog/glossary/dkim/) is an email authentication method that uses a pair of public-private DKIM keys to cryptographically ‘sign’ all outgoing emails. It protects email senders from phishing, spam, and spoofing by allowing recipient servers to verify the authenticity of the senders’ emails.

## What is a DKIM Record and Why is it Important?
A DKIM record is a crucial element of email authentication, helping to verify the legitimacy of messages sent from a domain. It is stored as a TXT record in the domain’s DNS and contains a public key used to validate DKIM signatures. Each DKIM record is associated with a unique selector. The importance of a DKIM record goes beyond authentication – it enhances email security, domain reputation, and deliverability.

## Ensure You’re Using a Valid DKIM Record
- The validity of your DKIM record is important for making sure your email goes through authentication. DMARC is built on both SPF and DKIM, and if one of them is missing, the other will fail. 
- DKIM is fundamental in protecting your email recipients and senders from malicious communication, forged messages, phishing, and spoofing attempts.

## Frequently Asked Questions
Have more questions?

### DKIM Tag Explanations
| TAG | TAG DESCRIPTION |
| --- | --- |
| v | The version tag indicates the version of DKIM, and should always be set on 1. |
| p (required) | The public key tag is a string of characters generated during DKIM setup. Leaving the value empty deems it invalid. |
| t | This tag lists the flags in a colon-separated sequence. |
| s | This tag lists record-applicable service types. |
| h | This tag defines the acceptable hash algorithms. |
| k | This is the key type tag with a default value of "rsa". |
| n | This tag acts like an optional note field for administrators. |

### How to create a DKIM Record?
To create a DKIM record:
- Enter your domain name, and EasyDMARC’s DKIM Record Generator tool will generate a private/public key pair.
- The tool will also provide the selector name.

### How to add a DKIM Record?
You can manually add your DKIM record by:
- Using EasyDMARC’s DKIM key generator to create a private/public key pair.
- Publishing the DKIM Public key in the DNS by adding the TXT record with your domain details.

### How to generate a DKIM key pair?
You can use EasyDMARC’s DKIM Record Generator to generate DKIM keys for your own dedicated email servers.

### Do I need to generate a DKIM Record if I’m using a third-party ESP?
No. Third-party ESPs, such as Google Workspace, already store a private DKIM key in their own mail server configurations.