Compose a DKIM TXT record (RFC 6376) for your DNS zone, or paste an existing record to inspect every tag. Tags are validated, the public key is wrapped to 255-character chunks, and unknown tags are flagged.
| Tag | Meaning |
|---|---|
v | Version. Must be DKIM1 if present, and must be the first tag. |
k | Key type. rsa (default) or ed25519 (RFC 8463). |
p | Public-key data, base64. An empty value means the key has been revoked. |
h | Acceptable hash algorithms (colon-separated). Usually sha256. |
s | Service type — typically email or *. |
t | Flags: y = testing, s = i= must match d= exactly. |
n | Free-form admin notes (rarely used). |
g | Granularity (DKIM 0.x legacy, ignored by RFC 6376 verifiers). |