How to Setup Google Workspace SPF, DKIM, DMARC Records - Email Authentication Tutorial

If you are tired of emails going to customers' spam folders, this article is for you. The inbox providers like Google and Yahoo only approve emails that pass their authentication check. Therefore, it is important to comply with the security standards to be trusted by inbox providers. SPF, DKIM, and DMARC are commonly used authentication standards to verify your domain. You can find these records in the Google Workspace Gmail settings. Follow the steps below to configure and add the Google Workspace verification records to the DNS provider.

Google Workspace Domain Verification:

You need to confirm or verify your domain ownership to get access to Google Workspace's advanced features. These features also include the DKIM signing for your outgoing emails. Once you have created your Google Workspace account with your domain and email, follow the steps below to verify the domain:

1. At the Google Workspace Admin console, click "Protect" in the first section of the three-step setup.

   

2. Alternatively, you can click Admin at the top left corner and click the "Configure Domain" option.

   

3. Read the instructions for logging in to your DNS provider and click "Continue with Step 2."

4. On the next page, copy the domain confirmation record name and value and add it to your DNS provider.

   

5. Login to your DNS provider and head to your domain. (We are using Cloudflare for this guide)

   

6. Go to the DNS tab and click Add Record.

   

7. Select type TXT.

8. In the record Name field, write the host name: @

9. Now copy the record value from Workspace and paste it into the Content field.

   

10. Hit the Save button to add the record to your DNS dashboard.

11. Once added, go back to Google Workspace and click the "Protect Domain."

    

Setup Google Workspace MX Records:

1. Click Activate in the "Enable Gmail for your domain" section.

   

2. Select "I Want to Activate Gmail."

   

3. Click Change Confirmation Method.

   

4. If you select Automatic Activation, the Google MX records will be added to your DNS provider automatically.

5. If you select Manual Activation, you will see a list of MX records.

   

6. To add Google Workspace MX records, delete previous records if there are any.

7. In the DNS dashboard, select record type MX.

8. Write "@" in the Name field.

9. Copy the MX value and paste it into the Mail Server field.

10. Select priority as mentioned with the MX record and click Save.

    

11. Repeat the same process to add all Google MX records.

Configure Google Workspace DKIM record:

1. In Google Workspace Admin console, go to Apps in the left navigation menu.

2. Click Google Workspace and head to the Gmail tab.

3. Go to the Authenticate Email section.

   

4. Select the domain and click Create New Entry.

   

5. Copy the Google Workspace DKIM record and add it to the DNS provider.

6. Select type TXT.

7. Add the record name in the Name field of your DNS dashboard.

8. Add the DKIM value in the Content field.

9. Click Save.

   

Setup Google Workspace SPF value:

1. In your DNS management panel, select type TXT.

2. In the record Name field, write @

3. In the Content field, copy and paste the following SPF value: v=spf1 include:_spf.google.com ~all.

4. Click Save and wait for DNS verification.

   

What to do when you have multiple SPF records?

If your domain already contains an SPF record/records from any other source, you can merge the existing value with the Google Workspace SPF value. You can use the DmarcDkim.com SPF merge tool to merge multiple SPF records.

1. Go to the SPF Merge Tool.

2. Add your domain name and Google Workspace SPF value.

3. Click the "Merge SPF Values" button.

4. The tool combines both records and gives you a merged value.

5. Edit your current SPF record by replacing the previous value with the merged value.

Setup Google Workspace DMARC record:

Utilize the DmarcDkim.com domain check tool to implement a strict DMARC policy and get actionable reports to protect your email receivers from scams.

1. Go to the DMARC Check tool.

2. Add your domain name and click Check.

   

3. The tool analyzes your domain and gives you a suggested value.

   

4. Add the record name and suggested value to your DNS provider.

   

5. Click the Sign-up button and add your business email to create your account at DmarcDkim.com.

   

6. On the dashboard, write your domain name and click Add Domain.

7. Next, add the domain verification record and confirm your domain ownership.

8. Now click Check DNS Records to update DNS changes.

9. After verification, your domain will start receiving DMARC reports within 24 hours.

For support and assistance, hire a DmarcDkim.com expert.