--- title: "DKIM Generator: Create DKIM Keys Securely And Safeguard Your Emails Against Spoofing Attempts | DuoCircle" description: "Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/resources/dkim-generator/" --- Resource # DKIM Generator: Create DKIM Keys Securely And Safeguard Your Emails Against Spoofing Attempts Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in [ Talk to an Expert → ](/contact/) [ See what we make ](/products/) ## DKIM Generator: Create DKIM Keys Securely And Safeguard Your Emails Against Spoofing Attempts A DKIM generator helps generate DKIM public and private keys securely and cryptographically sign emails. [Get DMARC Monitoring](/email/dmarc) ###### [EMAIL SECURITY SERVICES](/) ###### [PLANS AND PRICING](/email/dmarc#pricingarea) ###### [WHAT IS DKIM](/resources/what-is-dkim) In addition to the implementation of SPF and DMARC, adopting [DKIM](/resources/what-is-dkim) can further protect email senders and receivers by providing an **additional layer of security** that leverages encryption for better email authentication. _A DKIM signature is designed to prevent alterations in email messages while in transit_ between the sender and the receiver; implementing it eliminates the chances of malicious intrusions. Domain administrators can use a **DKIM generator** to create keys and publish a DKIM signature for a domain. Such a DKIM signature is an alpha-numeric string of characters. ![DMARC generator](https://media.mailhop.org/duocircle/images/2021/05/what-is-dkim.png) ### What Is A DKIM Generator? _A DKIM generator is a tool that generates the encryption/decryption key pair for a domain name_, which consists of a private key and a public key. There are various ways to [create DKIM keys](https://support.google.com/a/answer/174126?hl=en), as mentioned below - Using an organization’s email server if it has a native DKIM generator. - Using an open-source project that helps generate the DKIM keys. - One may also use OpenSSL to generate DKIM keys. [![DKIM selector](https://www.duocircle.com/wp-content/uploads/2021/05/DKIM-generator.jpeg)](/wp-content/uploads/2021/05/DKIM-generator.jpeg) ### Understanding How DKIM Works Using DKIM Keys Once the user creates the key pairs using a **DKIM generator**, the DKIM public key (or the p-value) is stored as a TXT record in the domain zone’s DNS. The private key creates a **DKIM signature** for emails sent, and the receiving server uses it to validate the email against the public key. The inbound mail server checks - If the version number is as per DKIM specification - If the sender’s domain identity information matches that in the signature - The ‘h=’ tag contains the ‘From’ header field. The inbound server then looks up the sender’s DKIM public key to verify the DKIM signature. A DKIM header contains information tags, such as ‘d=,’ ‘b=’ and ‘bh=,’ used for verification by recomputing the sender’s public key. If there is a match, the email passes [DKIM signature verification](https://www.emailonacid.com/blog/article/email-development/what%5Fis%5Fdkim%5Feverything%5Fyou%5Fneed%5Fto%5Fknow%5Fabout%5Fdigital%5Fsignatures). Alternatively, the DKIM verification may fail. The following reasons can cause a **DKIM failure** to occur. - The DKIM signature domain and sender domain (‘From’ header) do not match. - The sender’s DNS zone is unreachable for lookup. - The DKIM public key in the DNS zone is not published or incorrect. - The length of the DKIM key is too short. Currently, _1024 or 2048-bit long keys are standard_. - There may be modifications in the message due to attempted forgery. Having emails secured with DKIM signatures is highly recommended as it provides an edge to [email security](/) and communication. The absence of a DKIM signature may lead to emails being treated as spam or **phishing attempts**. Incorrectly set up [DKIM records](/resources/what-is-dkim) can also lead to emails being dropped and might create a poor reputation for an organization. Using a _DKIM generator from reputable third-party providers helps avoid incorrectly or poorly set up DKIM records_. ##### Join the thousands of organizations that use DuoCircle --- Find out how affordable it is for your organization today and be pleasantly surprised. [Get DMARC Monitoring](/email/dmarc) Interested in our Partner Program for MSPs and VARs? Visit Our [MSP Partner Program](/msp-partner-program). ## Ready to talk? Same-day response from someone technical. We tell you yes or no quickly. If yes, we get to work. [Talk to an Expert→](/contact/)[See what we make](/products/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"WebPage","name":"DKIM Generator: Create DKIM Keys Securely And Safeguard Your Emails Against Spoofing Attempts","description":"Join the thousands of organizations that use DuoCircle Find out how affordable it is for your organization today and be pleasantly surprised.Interested in ","url":"https://www.duocircle.com/resources/dkim-generator/","speakable":{"@type":"SpeakableSpecification","cssSelector":[".page-answer",".duo-rich-text p:first-of-type"]},"dateModified":"2021-07-08T15:47:04.000Z","datePublished":"2021-05-31T17:02:17.000Z"},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"DuoCircle","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"DKIM Generator: Create DKIM Keys Securely And Safeguard Your Emails Against Spoofing Attempts","item":"https://www.duocircle.com/resources/dkim-generator/"}]}] ```