Generate DKIM key pairs directly in your browser. Your private key never leaves your device.
DNS record will be at default._domainkey.yourdomain.com
DKIM adds a cryptographic signature to every outgoing email. Receiving servers verify the signature against the public key in your DNS.
If anyone modifies the email in transit, the DKIM signature breaks. This protects against tampering and man-in-the-middle attacks.
Your mail server signs emails with the private key. The public key is published as a DNS TXT record. Receivers look up the key and verify the signature.