How to setup SPF and DKIM for Google Workspace

This guide outlines the steps to configure Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) for your domain in Google Workspace, ensuring compliance with Domain-based Message Authentication, Reporting, and Conformance (DMARC) standards

Prerequisites:

• A domain should have only one SPF record.​

• Super Administrator access to Google Workspace.​

• Administrator access to your DNS provider.

SPF Setup:

Identify existing SPF Record:
Check if your domain already has an SPF record by querying your DNS records here.​

Add or Modify SPF Record:

If no SPF record exists, create one with the following value:

Host/Name:

Code

Value:

Codev=spf1 include:_spf.google.com ~all

If an SPF record exists, modify it to include Google’s SPF record:​

Existing SPF record:

Codev=spf1 include:example.com ~all

Updated SPF record:

Codev=spf1 include:example.com include:_spf.google.com ~all

DKIM Setup:

1. Access Google Admin Console:

• Sign in at admin.google.com.​

2. Navigate to DKIM Settings:

• Go to Apps > Google Workspace > Gmail.​

• Click on Authenticate Email.​

3. Select Domain:

• Choose the domain for DKIM setup.​

4. Generate DKIM Record:

• Click Generate New Record.​

• Configure DKIM settings:​
  DKIM key bit length:

• 2048-bit (recommended, if supported by your DNS provider).

• 1024-bit (if 2048-bit is unsupported).
  Prefix selector: Defaults to ‘google’.

5. Add DKIM Record to DNS:

• Copy the generated DKIM record.​

• Add it to your domain’s DNS records via your DNS provider’s management console.​

6. Activate DKIM:

• Return to the Google Admin Console.​

• Navigate to Apps > Google Workspace > Gmail > Authenticate Email.​

• Click Start Authentication.​

• Once DKIM is set up correctly, the status will update to: "Authenticating email with DKIM."​

More Information:

For additional details on email authentication and DKIM setup, please visit the Google’s Support Page:
Google Workspace DKIM setup guide

Verification:

Use tools like dmarclytics.io to verify your SPF and DKIM configurations.​

Support:

For assistance, contact us via live chat or submit a support ticket.​

By implementing these steps, your domain will be configured for DMARC compliance, enhancing email security and deliverability.