ES
WPO & Servers

DKIM, SPF & DMARC Generator

Extract DKIM signatures from your server (HestiaCP/Nginx) or public DNS and generate SPF & DMARC records to prevent spam.

Calculation Settings
HestiaCP uses "mail" by default.
Paste PEM file or HestiaCP command output
100% secure client-side JavaScript processing. Your keys never leave your browser.
DNS Records Configuration

Create these records in your external DNS zone (Cloudflare, GoDaddy, etc.) to authenticate your emails.

1. DKIM Record (Server Signature) Essential
Type TXT
Host mail._domainkey.yourdomain.com
Value (Paste your key on the left or click Scan DNS)
2. SPF Record (IP Authorization) Essential
Type TXT
Host @
Value v=spf1 a mx ip4:YOUR_SERVER_IP ~all
Note: Replace SERVER_IP with your server's IP address. Enter your domain above to detect it automatically.
3. DMARC Record (Delivery Policies) Highly Recommended
Type TXT
Host _dmarc
Value v=DMARC1; p=none; pct=100; rua=mailto:postmaster@yourdomain.com
Step-by-step Guide for HestiaCP
Step 1: Enable DKIM in HestiaCP

Log into your HestiaCP panel, go to the Mail tab, hover over your domain, and click Edit. Check the "Enable DKIM" checkbox and click Save.

Step 2: Get Key from Server or DNS

Enter your domain name above and click Scan DNS. The tool will check your local server or public DNS records. If you prefer to copy it manually via SSH in HestiaCP, run:
v-list-mail-domain-dkim-dns admin yourdomain.com

Step 3: Paste & Configure DNS

Paste the key into the text box. This tool will strip quotes and DNS line breaks to generate the clean formatted key. Copy and add it to your external DNS manager (like Cloudflare) along with the suggested SPF and DMARC records.