Configuring SPF and DKIM for Google Workspace

*Please ensure you don't have these records in place before adding anything. Check to see if you already have a DKIM under your Google Workspace DNS records. The Host Name will be google._domainkey. If you do, please reach out to us and we can work through next steps.

We know that getting your DNS settings configured can sound confusing, but we've created a step by step guide that hopefully makes the process much less daunting.

First we'll go over adding the DKIM key. DKIM is a way of authenticating your email to ensure it hasn't been altered in transit (and is indeed coming from you).

DKIM (DomainKeys Identified Mail)

  1. Make sure you are signed in as an administrator for Google (admin.google.com)
  2. Click "Apps" on the left hand side→Google Workspace→Gmail→Authenticate email
  3. Apps Step - Click on Apps in the left sidebarGoogle Workspace Step - Navigate to Google WorkspaceGmail Step - Click on Gmail option
    Authenticate Email Step - Click on Authenticate email option
  4. Click "Generate New Record" and select "2048"
  5. Generate New Record Step - Click on Generate New Record buttonDKIM Key Bit Length Step - Select 2048 bit length option
  6. Login to your domain provider and add a TXT record for your DKIM
  7. Domain List Step - Select your domain from the domain listAdvanced DNS Step - Click on Advanced DNS SettingsAdd TXT Record Step - Create a new TXT record
  8. Copy the "DNS host name (TXT Record Name)" and paste into the "Host" field
  9. DNS Host Name TXT Record Name Step - Copy the DNS host name from GoogleDNS Host Name Paste Step - Paste the DNS host name into the Host field
  10. Copy the generated DKIM and paste into the "Value" field
  11. DKIM Copy Step - Copy the generated DKIM key from GoogleDKIM Value Paste Step - Paste the DKIM key into the Value field
  12. Save changes and click "Start Authentication"
  13. Start Authentication Step - Click Start Authentication button in Google

SPF (Sender Policy Framework)

  1. Go to your domain provider's Advanced DNS settings
  2. Domain List Step - Select your domain from the domain listAdvanced DNS Step - Click on Advanced DNS Settings
  3. Add a new TXT record
  4. Add TXT Record Step - Create a new TXT record for SPF
  5. In the "Host" field, input "@"
  6. Host Name @ Step - Input @ symbol in the Host field
  7. In the "Value" field, paste: v=spf1 include:_spf.google.com ~all
  8. Paste SPF Value Step - Paste the SPF record into the Value field
  9. Save your changes

If you run into any issues, or need help with the walkthrough, please book a meeting with us HERE.