How to Setup Google Workspace SPF, DKIM, DMARC Records - Email Authentication Tutorial

How to Setup Google Workspace SPF, DKIM, DMARC Records - Email Authentication Tutorial

September 19, 2024

Google Workspace DMARC, DKIM, SPF Configuration for Email Authentication

If you are tired of emails going to customers' spam folders, this article is for you. The inbox providers like Google and Yahoo only approve emails that pass their authentication check. Therefore, it is important to comply with the security standards to be trusted by inbox providers. SPF, DKIM, and DMARC are commonly used authentication standards to verify your domain. You can find these records in the Google Workspace Gmail settings. Follow the steps below to configure and add the Google Workspace verification records to the DNS provider.

Google Workspace Domain Verification:

You need to confirm or verify your domain ownership to get access to Google Workspace's advanced features. These features also include the DKIM signing for your outgoing emails. Once you have created your Google Workspace account with your domain and email, follow the steps below to verify the domain:

  1. At the Google Workspace Admin console, click "Protect" in the first section of the three-step setup.

    In Google Workspace Admin Center, click Protect to verify domain ownership

  2. Alternatively, you can click Admin at the top left corner and click the "Configure Domain" option.

    Click Admin and go to Configure Domain option.

  3. Read the instructions for logging in to your DNS provider and click "Continue with Step 2."

  4. On the next page, copy the domain confirmation record name and value and add it to your DNS provider.

    Add the domain confirmation record to your DNS provider

  5. Login to your DNS provider and head to your domain. (We are using Cloudflare for this guide)

    Go to your Website in the DNS provider
  6. Go to the DNS tab and click Add Record.

    Click DNS, go to Records and hit the Add Record button

  7. Select type TXT.

  8. In the record Name field, write the host name: `@`

  9. Now copy the record value from Workspace and paste it into the Content field.

    Setup domain verification record in DNS provider

  10. Hit the Save button to add the record to your DNS dashboard.

  11. Once added, go back to Google Workspace and click the "Protect Domain."

    Click

Setup Google Workspace MX Records:

  1. Click Activate in the "Enable Gmail for your domain" section.

    Click Activate in the

  2. Select "I Want to Activate Gmail."

    Select

  3. Click Change Confirmation Method.

    Click Change Confirmation Method.

  4. If you select Automatic Activation, the Google MX records will be added to your DNS provider automatically.

  5. If you select Manual Activation, you will see a list of MX records.

    Select Automatic or Manual Activation
  6. To add Google Workspace MX records, delete previous records if there are any.

  7. In the DNS dashboard, select record type MX.

  8. Write "@" in the Name field.

  9. Copy the MX value and paste it into the Mail Server field.

  10. Select priority as mentioned with the MX record and click Save.

    Setup Google Workspace MX records
  11. Repeat the same process to add all Google MX records.

Configure Google Workspace DKIM record:

  1. In Google Workspace Admin console, go to Apps in the left navigation menu.

  2. Click Google Workspace and head to the Gmail tab.

  3. Go to the Authenticate Email section.

    Open Gmail settings in Google Workspace and go to Authenticate email tab

  4. Select the domain and click Create New Entry.

    Select domain and click Create New Key

  5. Copy the Google Workspace DKIM record and add it to the DNS provider.

  6. Select type TXT.

  7. Add the record name in the Name field of your DNS dashboard.

  8. Add the DKIM value in the Content field.

  9. Click Save.

    Setup Google Workspace DKIM Record

Setup Google Workspace SPF value:

  1. In your DNS management panel, select type TXT.

  2. In the record Name field, write `@`

  3. In the Content field, copy and paste the following SPF value: `v=spf1 include:_spf.google.com ~all`.

  4. Click Save and wait for DNS verification.

    Add the Google Workspace SPF record to the DNS provider

What to do when you have multiple SPF records?

If your domain already contains an SPF record/records from any other source, you can merge the existing value with the Google Workspace SPF value. You can use the DmarcDkim.com SPF merge tool to merge multiple SPF records.

  1. Go to the SPF Merge Tool.

  2. Add your domain name and Google Workspace SPF value.

  3. Click the "Merge SPF Values" button.

  4. The tool combines both records and gives you a merged value.

  5. Edit your current SPF record by replacing the previous value with the merged value.

Setup Google Workspace DMARC record:

Utilize the DmarcDkim.com domain check tool to implement a strict DMARC policy and get actionable reports to protect your email receivers from scams.

  1. Go to the DMARC Check tool.

  2. Add your domain name and click Check.

    Add domain name in the DMARC check tool
  3. The tool analyzes your domain and gives you a suggested value.

    Add the DMARC record and value in the DNS provider

  4. Add the record name and suggested value to your DNS provider.

    Setup DMARC for Googel Workspace

  5. Click the Sign-up button and add your business email to create your account at DmarcDkim.com.

    Sign up at DmarcDkim.com to get DMARC insight reports

  6. On the dashboard, write your domain name and click Add Domain.

  7. Next, add the domain verification record and confirm your domain ownership.

  8. Now click Check DNS Records to update DNS changes.

  9. After verification, your domain will start receiving DMARC reports within 24 hours.

For support and assistance, hire a DmarcDkim.com expert.