Setting up a Google Workspace: SPF, DKIM and DMARC Records

Once you get the Google Workspace set up, you will need to add TXT records to the domain to improve email deliverability and prevent spoofing. Google will send an error message if you do not.

After working with Google support, I got some clarity on the records.

SPF Records

Reference this help article: https://support.google.com/a/answer/33786?hl=en&ref_topic=9061731&sjid=6887155437240596817-NC

Here is an example from websitesmadewithlove.com, which includes MailChimp, a screenshot and then some code after:

Name: websitesmadewithlove.com.

v=spf1 +mx +a +ip4:165.22.233.249 +include:_spf.google.com +include:relay.mailchannels.net ~all

Here is a more basic option for Google Workspace only:

v=spf1 include:_spf.google.com ~all

DKIM

You need to follow this help article: https://support.google.com/a/answer/174124?src=supportwidget0&hl=en&authuser=0#dkim-create-key

You will have to generate the key; always do the smaller character length, 1024, so it doesn’t split. It takes 48 hours to authenticate, don’t forget this crucial step.

DMARC

Here is the Google help article: https://support.google.com/a/answer/2466580?hl=en&ref_topic=9061731&sjid=6887155437240596817-NC

This one is pretty simple but cant be done until DKIM is authenticated.

Ad the TXT record as shown below:

Name: _dmarc.insertyourdomainhere.com.

TTL: 3600

Type: TXT

Record: v=DMARC1; p=none;