--- title: "How to Set Up SPF, DKIM and DMARC for Google Workspace" description: "Step by step: SPF, DKIM and DMARC records for Google Workspace email on your domain, so your messages don’t land in spam. Example records and testing." url: "https://it-deweloper.pl/en/blog/google-workspace-spf-dkim-dmarc" date: "2026-10-17T23:43:55+00:00" language: "en-GB" --- [Skip to main content](#tm-main) - [ Home](https://it-deweloper.pl/en "IT Deweloper web studio home page") - [Contact](https://it-deweloper.pl/en/contact "Contact the IT Deweloper web studio") - [ +48 731 190 041](tel:+48731190041 "Phone") - [ office@it-deweloper.pl](mailto:office@it-deweloper.pl "E-mail") - [ Nowogródzka 4A, Białystok, Poland](https://maps.app.goo.gl/BNjvryytwRyv4omA7 "Address") - [ WhatsApp](https://wa.me/48731190041 "WhatsApp") - [ Telegram](https://t.me/+48731190041 "Telegram") - [Solutions](https://it-deweloper.pl/en/web "IT Deweloper's web development solutions") - [How we workStages of work](https://it-deweloper.pl/en/web/process "Website development stages and timelines") - [SEOSearch engine optimization](https://it-deweloper.pl/en/web/seo "SEO promotion: optimization, links, positions in Google") - [GEOWebsite promotion in AI](https://it-deweloper.pl/en/web/geo "GEO optimization: website promotion in ChatGPT, Gemini and Perplexity answers") - [AIArtificial Intelligence on the website](https://it-deweloper.pl/en/web/ai) - [JoomlaWebsite Management System](https://it-deweloper.pl/en/web/joomla "Joomla website development") - [GoogleGoogle services setup](https://it-deweloper.pl/en/web/google "Google services setup for your website") - [Cost](https://it-deweloper.pl/en/cost "Rates and cost of services") - [PricingIndicative website development prices](https://it-deweloper.pl/en/cost/pricing "Website development prices") - [CalculatorSelf-service online estimate](https://it-deweloper.pl/en/cost/calculator "Calculate your website cost online") - [BriefGet an accurate project quote](https://it-deweloper.pl/en/cost/brief "Fill out the website development brief") - [Portfolio](https://it-deweloper.pl/en/portfolio "Portfolio and examples of our work") - [About us](https://it-deweloper.pl/en/about "About the founder — Victor Parhimchik") - [FAQ](https://it-deweloper.pl/en/faq "Frequently asked questions about website development") - [Blog](https://it-deweloper.pl/en/blog "Articles on website development and promotion") - [ Русский ](https://it-deweloper.pl/ru/blog/google-workspace-spf-dkim-dmarc) - [ Polski ](https://it-deweloper.pl/pl/blog/google-workspace-spf-dkim-dmarc) - [ Беларуская ](https://it-deweloper.pl/be/blog/google-workspace-spf-dkim-dmarc) - [ English ](https://it-deweloper.pl/en/blog/google-workspace-spf-dkim-dmarc) - ![](https://it-deweloper.pl/templates/yootheme/assets/images/language.svg) English - [ Русский ](https://it-deweloper.pl/ru/blog/google-workspace-spf-dkim-dmarc) - [ Polski ](https://it-deweloper.pl/pl/blog/google-workspace-spf-dkim-dmarc) - [ Беларуская ](https://it-deweloper.pl/be/blog/google-workspace-spf-dkim-dmarc) - [ English ](https://it-deweloper.pl/en/blog/google-workspace-spf-dkim-dmarc) [ ![IT-Deweloper](https://it-deweloper.pl/images/Faviocon.svg)![IT-Deweloper](https://it-deweloper.pl/images/Logo-light.svg)](https://it-deweloper.pl/en) [ Menu ](#tm-dialog) - [ Home](https://it-deweloper.pl/en "IT Deweloper web studio home page") - [Contact](https://it-deweloper.pl/en/contact "Contact the IT Deweloper web studio") - [ +48 731 190 041](tel:+48731190041 "Phone") - [ office@it-deweloper.pl](mailto:office@it-deweloper.pl "E-mail") - [ Nowogródzka 4A, Białystok, Poland](https://maps.app.goo.gl/BNjvryytwRyv4omA7 "Address") - [ WhatsApp](https://wa.me/48731190041 "WhatsApp") - [ Telegram](https://t.me/+48731190041 "Telegram") - [Solutions](https://it-deweloper.pl/en/web "IT Deweloper's web development solutions") - [How we workStages of work](https://it-deweloper.pl/en/web/process "Website development stages and timelines") - [SEOSearch engine optimization](https://it-deweloper.pl/en/web/seo "SEO promotion: optimization, links, positions in Google") - [GEOWebsite promotion in AI](https://it-deweloper.pl/en/web/geo "GEO optimization: website promotion in ChatGPT, Gemini and Perplexity answers") - [AIArtificial Intelligence on the website](https://it-deweloper.pl/en/web/ai) - [JoomlaWebsite Management System](https://it-deweloper.pl/en/web/joomla "Joomla website development") - [GoogleGoogle services setup](https://it-deweloper.pl/en/web/google "Google services setup for your website") - [Cost](https://it-deweloper.pl/en/cost "Rates and cost of services") - [PricingIndicative website development prices](https://it-deweloper.pl/en/cost/pricing "Website development prices") - [CalculatorSelf-service online estimate](https://it-deweloper.pl/en/cost/calculator "Calculate your website cost online") - [BriefGet an accurate project quote](https://it-deweloper.pl/en/cost/brief "Fill out the website development brief") - [Portfolio](https://it-deweloper.pl/en/portfolio "Portfolio and examples of our work") - [About us](https://it-deweloper.pl/en/about "About the founder — Victor Parhimchik") - [FAQ](https://it-deweloper.pl/en/faq "Frequently asked questions about website development") - [Blog](https://it-deweloper.pl/en/blog "Articles on website development and promotion") [ IT Deweloper Blog ](https://it-deweloper.pl/index.php?option=com_content&view=category&id=29&lang=en-GB "IT Deweloper Blog") # How to Set Up SPF, DKIM and DMARC for Google Workspace If emails from your domain land in spam or don’t arrive at all, the first thing to check is three DNS records: SPF, DKIM and DMARC. Since 2024, Gmail has required all senders to have at least SPF or DKIM, and bulk senders to have all three. Here’s how to set up all three records for Google Workspace email on your own domain: what to add, in what order and how to check the result. --- ![An envelope in a browser window, a step checklist and a question mark — a guide to setting up SPF, DKIM and DMARC for Google Workspace](https://it-deweloper.pl/images/blog/google-workspace-spf-dkim-dmarc-cover-2x.webp) ## Why three records - **SPF** — a list of servers allowed to send email on behalf of your domain. - **DKIM** — a digital signature on every message: the recipient checks that it really comes from you and wasn’t altered on the way. - **DMARC** — a rule for recipients: what to do with a message that fails the checks, and where to send reports. All three records are added in DNS at your domain registrar or host — wherever your domain records are managed. In the Google Workspace Admin console you only generate the DKIM key. ## Step 1. SPF Create a TXT record for the root domain (the host field is usually `@`) with the value: ``` v=spf1 include:_spf.google.com ~all ``` If your domain already has an SPF record — for hosting email or a newsletter service, for example — don’t create a second one. Add Google to the existing record: ``` v=spf1 include:_spf.google.com include:servers.mcsv.net ~all ``` Here the second `include` is an example for Mailchimp. Two separate SPF records on one domain break the check. Think of every service that sends email from your domain: your website, CRM, newsletters. If your site sends enquiries through your host’s mail server, it needs to be in SPF too — or set up your site to send through Google Workspace SMTP. ## Step 2. DKIM 1. In the Google Admin console, open Apps → Google Workspace → Gmail → Authenticate email. 2. Select your domain and click Generate new record. 3. Choose a 2048-bit key if your registrar supports it. Leave the selector prefix at the default — `google`. 4. Copy the host name (`google._domainkey`) and the TXT record value. 5. Add this TXT record to your domain’s DNS. 6. Go back to the console and click Start authentication. DKIM checks start working within 48 hours of adding the record. If Gmail has only just been turned on for your organisation, you’ll be able to generate the key after 24–72 hours. If your DNS panel won’t accept the long key value, choose a 1024-bit key. ## Step 3. DMARC 48 hours after setting up SPF and DKIM, create a TXT record with the host `_dmarc`. Start with a relaxed policy that blocks nothing and only sends reports: ``` v=DMARC1; p=none; rua=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it. ``` Replace the address with your own mailbox for reports. The `v` and `p` tags must come first. Once the reports show that all your legitimate senders pass, tighten the policy gradually: first `p=quarantine` — suspicious messages go to spam — then `p=reject` — such messages are refused. Don’t rush: a strict policy with a forgotten sender will cut off that sender’s email too. ## Step 4. Check the result - Send a message from your mailbox to any Gmail address, open it and choose Show original. SPF, DKIM and DMARC should all say PASS. - Your domain records are easy to check with [Check MX](https://toolbox.googleapps.com/apps/checkmx/) from the Google Admin Toolbox. ## Common mistakes - Two SPF records instead of one. - A forgotten sender: your CRM or website sends email from your domain but isn’t in SPF and doesn’t sign with DKIM. - The DKIM record is added, but Start authentication wasn’t clicked in the console. - Going straight to `p=reject`, so some legitimate email stops arriving. - Records added in the wrong panel: the domain’s DNS is managed somewhere other than you think. ## In short 1. SPF: one record with `include:_spf.google.com` and all your other senders. 2. DKIM: generate the key in the Admin console, add the `google._domainkey` TXT record and click Start authentication. 3. DMARC: after 48 hours, a `_dmarc` TXT record with `p=none` and a reporting address. 4. Check for PASS in Show original. 5. Tighten DMARC gradually, based on the reports. If you’re just moving to Google Workspace or your emails keep landing in spam, we can [connect Google Workspace email to your domain](https://it-deweloper.pl/en/web/google/google-workspace): set up Workspace, configure DNS, create mailboxes and test delivery. 17 October 2026 | [Victor Parhimchik](https://it-deweloper.pl/index.php?option=com_contact&view=contact&id=1&catid=4) | [IT Deweloper Blog](https://it-deweloper.pl/index.php?option=com_content&view=category&id=29) [ ![A database icon in a browser window, a step checklist and a question mark — a guide to first queries on GA4 data in BigQuery](https://it-deweloper.pl/images/blog/ga4-bigquery-first-query-cover.webp) ### How to Write Your First Query on GA4 Data in BigQuery Once Google Analytics 4 is linked to BigQuery, raw events appear in your warehouse every day: every page view, click and enquiry with all its paramet… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=300:ga4-bigquery-first-query&catid=29&lang=en-GB) [ ![A gateway arch with an arrow in a browser window, a step checklist and a question mark — an explanation of how Google tag gateway works](https://it-deweloper.pl/images/blog/how-google-tag-gateway-works-cover.webp) ### How Google Tag Gateway Works and Whether to Turn It On Google tag gateway is a feature that lets you load Google tags from your own domain instead of Google’s servers. It’s often described as a way to “by… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=299:how-google-tag-gateway-works&catid=29&lang=en-GB) [ ![A speed gauge with a needle in a browser window, a step checklist and a question mark — a guide to checking Core Web Vitals](https://it-deweloper.pl/images/blog/check-core-web-vitals-cover.webp) ### How to Check Your Core Web Vitals and Read the Numbers Core Web Vitals are three metrics Google uses to judge how comfortable a page is to use: how quickly the main content appears, how quickly the page r… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=298:check-core-web-vitals&catid=29&lang=en-GB) [ ![An envelope in a browser window, a step checklist and a question mark — a guide to setting up SPF, DKIM and DMARC for Google Workspace](https://it-deweloper.pl/images/blog/google-workspace-spf-dkim-dmarc-cover.webp) ### How to Set Up SPF, DKIM and DMARC for Google Workspace If emails from your domain land in spam or don’t arrive at all, the first thing to check is three DNS records: SPF, DKIM and DMARC. Since 2024, Gmail… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=297:google-workspace-spf-dkim-dmarc&catid=29&lang=en-GB) [ ![A shield with a padlock in a browser window, a step checklist and a question mark — a guide to choosing reCAPTCHA and getting keys](https://it-deweloper.pl/images/blog/choose-recaptcha-version-cover.webp) ### How to Choose reCAPTCHA for a Form and Get the Keys reCAPTCHA protects your website forms from spam bots. During 2025, Google moved all reCAPTCHA keys to Google Cloud, so many older guides are out of d… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=296:choose-recaptcha-version&catid=29&lang=en-GB) [ ![A map pin in a browser window, a step checklist and a question mark — a guide to embedding a Google map on a website](https://it-deweloper.pl/images/blog/embed-google-map-on-website-cover.webp) ### How to Embed a Google Map on Your Website Without an API Key A map on your Contact page helps customers see where you are and get directions straight away. You don’t need an API key or a payment card in Google… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=295:embed-google-map-on-website&catid=29&lang=en-GB) [ ![A target with an arrow in a browser window, a step checklist and a question mark — a guide to checking Google Ads conversions](https://it-deweloper.pl/images/blog/check-google-ads-conversions-cover.webp) ### How to Check That Google Ads Conversions Are Tracked Google Ads learns from conversions: enquiries, calls, purchases. If they’re counted wrongly, the system optimises your campaigns blind — spending bud… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=294:check-google-ads-conversions&catid=29&lang=en-GB) [ ![Pie and bar charts in a browser window, a step checklist and a question mark — a guide to building a Data Studio report](https://it-deweloper.pl/images/blog/data-studio-first-report-cover.webp) ### How to Build a Data Studio Report from Analytics and GSC Data Studio is Google’s free tool for reports and dashboards. In April 2026 Google brought back this name; for several years before that it was calle… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=293:data-studio-first-report&catid=29&lang=en-GB) [ ![A cookie icon in a browser window, a step checklist and a question mark — a guide to checking Google Consent Mode](https://it-deweloper.pl/images/blog/check-consent-mode-v2-cover.webp) ### How to Check If Consent Mode v2 Works on Your Website Google Consent Mode v2 passes the choice a visitor made in your cookie banner to Google Analytics and Google Ads. A banner can look perfect and still… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=292:check-consent-mode-v2&catid=29&lang=en-GB) [ ![A Tag Manager tag icon in a browser window, a step checklist and a question mark — a guide to installing Google Tag Manager](https://it-deweloper.pl/images/blog/install-google-tag-manager-cover.webp) ### How to Install Google Tag Manager on Your Website Google Tag Manager is a “box” for all the tracking codes on your site: Google Analytics, Google Ads conversions, social media pixels. You install the… ](https://it-deweloper.pl/index.php?option=com_content&view=article&id=291:install-google-tag-manager&catid=29&lang=en-GB) [](#) [](#) ## Build your website Find out what your website will cost [ Pricing ](https://it-deweloper.pl/index.php?Itemid=262&lang=en-GB) ![](https://it-deweloper.pl/media/yootheme/cache/3c/background-square-01-3c44c74f.png?src=images/yootheme/demo/background-square-01.png&thumbnail=900,900,&hash=72c31958) ![](https://it-deweloper.pl/media/yootheme/cache/cb/background-square-03-cbb341a0.png?src=images/yootheme/demo/background-square-03.png&thumbnail=600,600,&hash=6e9dde93) ### [ Contact ](https://it-deweloper.pl/index.php?Itemid=277&lang=en-GB) Web studio IT Deweloper website development, Poland. 5423493188 SEOAIAdsWebSMM ### Address Nowogródzka 4A Białystok, 15-490, PL [ ### Phone +48 731 190 041 ](tel:+48731190041) [ ### Email This email address is being protected from spambots. You need JavaScript enabled to view it. ](mailto:office@it-deweloper.pl) [ ### WhatsApp ](https://wa.me/48731190041) [ ### Telegram ](https://t.me/+48731190041) Opening hours: - Monday 0900–1800 - Tuesday 0900–1800 - Wednesday 0900–1800 - Thursday 0900–1800 - Friday 0900–1800 - Saturday 0900–1600 - Sunday closed ![IT Deweloper](https://it-deweloper.pl/images/Logo.webp) Web development can be interesting! Our social media, with content about building websites. - [](https://www.facebook.com/ITdeweloper) - [](https://www.linkedin.com/company/it-deweloper) - [](https://t.me/IT_deweloper) - [](https://www.instagram.com/it_deweloper/) - [Portfolio](https://it-deweloper.pl/index.php?Itemid=264&lang=en-GB) - [Contact](https://it-deweloper.pl/index.php?Itemid=277&lang=en-GB) - [About us](https://it-deweloper.pl/index.php?Itemid=261&lang=en-GB) **it-deweloper** — a web development studio. We design and build modern websites and online stores. © [it-deweloper](https://it-deweloper.pl/en). All rights reserved. [Privacy Policy](https://it-deweloper.pl/index.php?Itemid=313&lang=en)