Best free DKIM record generators

AdminKit is built by Netbase JSC. AdminKit is listed below; the other tools are independent.

Criteria and how we weighted them

This roundup ranks four free DKIM record generators against five published criteria, in priority order, using only what each tool’s own page stated when read on 2026-11-08:

1. Gets you from nothing to a publishable record — a beginner usually has no key pair. A page that says it generates one (with a stated key size) beats one that only formats a key you already hold.
2. Tells you where the record goes — DKIM records live at selector._domainkey.<domain> (RFC 6376), so stating that host name matters.
3. Record tag coverage — does the page document the optional tags beyond v, k and p?
4. Nothing leaves your browser — documented on the page itself, not assumed.
5. Points to a check of the published record — publishing is not the end of the job.

Where a page did not mention a feature, the table says so with a dash. That is not a claim that the feature is missing, only that the page read did not document it. AdminKit’s DKIM record generator ranks second of four: it fails criterion 1 outright, but documents criteria 2 to 5 where the other pages document fewer of them.

The ranked list, explained

1. EasyDMARC — per its own page, read 2026-11-08, titled “DKIM Record Generator”. It asks for a domain name and an email sending platform chosen from a long dropdown, then generates a private/public key pair, with “1024, 2048, and 4096-bit length keys” and RSA as the default. It tells you to publish the public key as a TXT record at <selector>._domainkey.<yourdomain.com> and to test it with its DKIM Lookup tool. The page shows a “Start Free Trial” button and does not say whether the generator itself needs an account, and it does not state where the key is generated or whether anything is sent to its servers.

2. AdminKit — the DKIM record generator takes a selector, a domain and a public key you already have, and assembles the v=DKIM1, k=, p= record with optional t=, h=, s= and n= tags. Its page says the record is built in browser JavaScript with nothing sent anywhere, that it splits long values into 255-octet quoted strings, and that a blank key builds an intentional revocation record. It ranks behind EasyDMARC because it never creates the key pair: you generate one yourself, for example with OpenSSL, and paste the public half.

3. Mailhardener — per its own page, read 2026-11-08, “Use this tool to generate a DKIM DNS record for your domain”, with a “Copy” button for the generated record and the instruction to place it as a TXT record at [selector]._domainkey.yourdomain.tld. It points to a separate DKIM record validator. The page read does not state its inputs, whether it creates a key pair, key sizes, or where the record is built, so its placement reflects thin evidence rather than a verdict on the tool.

4. DMARCLY — per its own page, read 2026-11-08, titled “Free DKIM Record Generator”. It asks for a domain, a DKIM selector and a key length of 1024, 2048 or 4096, and describes a DKIM record as a TXT record starting with v=DKIM1. It shows “Free Trial” and “Log In” links. Whether it generates the key pair, where to publish the result and how to check it are not stated on the page read.

Best for your specific need

• Starting with no key pair at all: EasyDMARC, by its own page’s key-pair generation, after confirming the generator is available to you without a trial.
• Building a record from a public key you already hold, without sending it anywhere: AdminKit.
• A quick copyable record with the host name spelled out: Mailhardener.
• Picking a key length up front: EasyDMARC or DMARCLY.

Where AdminKit is honestly behind

AdminKit’s generator never creates a key pair and never handles a private key, so you must generate the pair elsewhere before you can use it; EasyDMARC’s page describes doing that step for you, and DMARCLY’s offers a key length choice. It does not parse the key itself, so it cannot confirm that what you pasted is really an RSA or Ed25519 public key, and it never queries DNS. Once the record is published, use AdminKit’s DKIM check to confirm it, and read how to rotate a DKIM key without breaking mail before replacing an existing selector. For comparing live-DNS checkers rather than generators, see best free DKIM record checkers. The generator sits in AdminKit’s email-authentication cluster.

---

Trademarks belong to their respective owners; AdminKit is not affiliated with EasyDMARC, DMARCLY or Mailhardener.