Pick a selector and key size. We generate an RSA keypair with the Web Crypto API, give you a paste-ready public DNS record and the private key to install in your mail server. The private key is created on your device and never sent to us.
Generated in your browser with the Web Crypto API. The private key is never sent to us, logged, or stored. Reload the page and it's gone, so copy it somewhere safe.