Configuring SPF and DKIM for Google Workspace

*Please ensure you don't have these records in place before adding anything. Check to see if you already have a DKIM under your Google Workspace DNS records. The Host Name will be google._domainkey. If you do, please reach out to us and we can work through next steps.

We know that getting your DNS settings configured can sound confusing, but we've created a step by step guide that hopefully makes the process much less daunting.

First we'll go over adding the DKIM key. DKIM is a way of authenticating your email to ensure it hasn't been altered in transit (and is indeed coming from you).

DKIM (DomainKeys Identified Mail)

1. Make sure you are signed in as an administrator for Google (admin.google.com)
2. Click "Apps" on the left hand side→Google Workspace→Gmail→Authenticate email
3. Click "Generate New Record" and select "2048"
4. Login to your domain provider and add a TXT record for your DKIM
5. Copy the "DNS host name (TXT Record Name)" and paste into the "Host" field
6. Copy the generated DKIM and paste into the "Value" field
7. Save changes and click "Start Authentication"

SPF (Sender Policy Framework)

1. Go to your domain provider's Advanced DNS settings
2. Add a new TXT record
3. In the "Host" field, input "@"
4. In the "Value" field, paste: v=spf1 include:_spf.google.com ~all
5. Save your changes