Google Workspace: SPF, DKIM and DMARC setup
Add these records at your DNS host, then check your domain below. The check counts SPF lookups and shows any Google Workspace DKIM key it finds.
The rest of the domain
Watch this domain for changes with Sender Guard. Free for 3 domains.
Records for Google Workspace
| Type | Host | Value |
|---|---|---|
| TXT | @ | v=spf1 include:_spf.google.com ~all |
| TXT | google._domainkey | generated in Admin console → Apps → Google Workspace → Gmail → Authenticate email |
Google's default DKIM selector is google. DKIM is off until you generate the key and press Start authentication.
DMARC. Start with v=DMARC1; p=none; rua=mailto:you@yourdomain.com at _dmarc, read the reports for a few weeks, then move to p=quarantine. Gmail and Yahoo require a DMARC record from bulk senders.
One SPF record only. If you already have one, add the include to it rather than publishing a second record.
Other checks
SPF checker DMARC checker DKIM checker MX lookup Full domain report