After publishing, verify with the DKIM checker.
Get alerted when it changes
Free daily monitoring re-checks SPF, DKIM, DMARC, MX, BIMI and MTA-STS and emails you when something changes or fails.
Set up free monitoringFrequently asked questions
Should I generate my own DKIM key?
Only if you run your own mail server or your provider asks you to supply a key. Google Workspace, Microsoft 365 and most sending services generate keys for you in their admin panel.
Is the private key safe?
The key pair is generated by your browser's Web Crypto API. Nothing is sent to our server. Store the private key securely and never put it in DNS.
How often should I rotate DKIM keys?
Common practice is every 6-12 months: publish a new selector, switch signing to it, then revoke the old one by setting p= empty.