DKIM keys, generated where you are.
Generate a DKIM key pair in your own browser — the private key never reaches us — and get the DNS record to publish. Or check a selector that is already live.
Step 1
Enter the domain and a selector.
Step 2
Generate: a key pair is made in your browser and never leaves it. Check: we read what is published.
Step 3
You get the TXT record to publish, split for the 255-character limit if it needs it.
Where the key is made
The key pair is generated by your own browser and never sent anywhere. Close the tab and the private key is gone, so save it before you do.
An RSA public key does not fit in one TXT string: a single string stops at 255 characters. Most DNS hosts split it for you; the ones that do not need the strings published in order, and the record is shown split when it needs to be.