SPF, DKIM, and DMARC are email authentication methods to prove to mail services that senders are authorized to send email from a particular domain. As such these methods allow you to protect the reputation of your domain name and business by preventing spammers misusing your email system to send out spam and phishing scam emails using your domain name.
Follow the steps below to deploy SPF, DKIM and DMARC records to safeguard your domain name, and business.
Here's how you can set up SPF for Google Workspace
SPF (Sender Policy Framework) is used to check that email is indeed coming from the address it claims to have come from in the 'message headers' (the information used by mail services to ensure your email reaches its intended recipient).
To enable SPF for Google Workspace:
-
Log in to your account with your domain name provider
-
Go to your domain's DNS settings
-
Add a new TXT record with this value: v=spf1 include:_spf.google.com ~all
-
Click Save
Here's how you can set up DKIM for Google Workspace
DKIM (Domain Keys Identified Mail) is another solid method to prevent your emails being incorrectly marked as spam.
In order to enable DKIM please follow the steps below:
Step 1: Log in to your Google Workspace Admin console
-
Click Apps -> Google Workspace -> Gmail -> Authenticate email
-
Click on your domain name from the drop-down list, and hit Generate new record button
-
Copy the generated text record
Important: If you receive this error: DKIM authentication settings update failed,while trying to generate a DKIM Record, you must wait 24–72 hours and then try getting your DKIM key in the Admin console.
Step 2: Log in to your account with your domain name provider
- Go to your domain's DNS Settings
-
Add a new TXT record with the name google._domainkey and then paste the DKIM text record generated previously. It will look something like: v=DKIM1; k=rsa; p=XSDG3detrRWE
-
Hit Save
Step 3: Go to Google Apps to use DKIM to protect your email
-
Log into Google Workspace Admin Console
-
Go to Apps -> Google Workspace -> Gmail -> Authenticate email
-
Select your domain from the drop-down menu
-
Hit Start Authentication
Here's how you can set up DMARC for Google Workspace
Domain-based Message Authentication, Reporting and Conformance (DMARC) is what sets you apart from spammers. Make sure you have already activated SPF and DKIM by following the steps above before setting up DMARC. This is because DMARC works only when both SPF and DKIM records are in place.
To set up DMARC:
- Log in to your account with your domain name provider, and go to your domain's DNS settings
-
Add a new TXT record with the DMARC settings you'd like to apply
-
Hit Save
Verify if your Google Workspace SPF, DKIM & DMARC are Working
To check if your SPF, DKIM and DMARC safeguards are working:
- Visit the Google Workspace MX tool
- Enter your domain name and hit Run Checks!
- Check if the report confirms your SPF, DKIM and DMARC are in place correctly
These changes may take up to 48 hours take effect.
With SPF, DKIM and DMARC in place, it'll be harder for spammers to impersonate you and damage your credibility. You will also notice improved email delivery, with lesser instances of intended recipients claiming they didn't receive your emails in instances where it was previously blocked by their spam filters.
PRO TIPS
Did you know you can apply Google Workspace MX Records, apply SPF records, and verify your domain with one click if your domain is hosted by Rocket Domains? Why not then transfer your domain to your Rocket Domains? You'll also get Rocket Cloud DNS for free giving you lightning fast speeds, bullet proof security, and 100% uptime.
If you have already signed up for Google Workspace elsewhere, you can easily transfer it to Rocket and benefit from setup & support from our Google certified British Workspace professionals, 1 click Workspace upgrades & license/mailbox management, and your own powerful Mission Control dashboard.
Consider transferring your existing domain to Rocket for 1 click integration with Google Workspace, easier management, and free Rocket Cloud DNS giving your site bullet proof security, lightning fast DNS speeds and 100% uptime. That means you can thwart DNS, DDoS attacks and run your website at the speed of light with no down time. Transferring your domain to us will also extend your domain's life by another year.
You may also sign up for our best-in-class Rocket powered WordPress hosting on Google Cloud and take your business to the next level with free WordPress set up, migration, ssl, speed optimization, premium seo tools, Astronomical Support and more.
Need help with Google Workspace?
If you need help it's easy to contact our Astronomical Support available to all Rocketeers on our web launchpad.
More useful tips for your business
Google confirms domain does not affect site SEO
The Whys and Hows of Backing Up Your WordPress Website
Why Google Workspace is Great for Your Business
