A DKIM key generator creates a pair of cryptographic keys: a private key and a public key. The private key is used to sign your outgoing emails, while the public key is published in your domain's DNS records. When the recipient's email server receives your email, it uses the public key to verify the signature, ensuring the email's authenticity.