How to Enable SPF for Google GSuite
To set up your SPF record with Google GSuite or edit your current SPF record to include GSuite, follow the steps below:
- Sign in to your domain account at your domain's DNS hosting provider (Not GSuite)
- Locate page for updating your domain’s DNS records (e.g., DNS Management, Name Server Management, Advanced Settings)
- Find your TXT records to check if you have an existing SPF record (record will start with v=spf1).
- If you have an existing SPF record, follow the instructions below to update an existing SPF record with multiple mail servers.
- In your existing SPF record, you will append include:_spf.google.com
- For example, if your existing record looked like v=spf1; mx; ip4:1.2.3.4; you would add the above include as follows v=spf1; mx; ip4:1.2.3.4; include:_spf.google.com;
- If you do not have an SPF record, Create a new TXT record with the following values:
- In the Name/Host/Alias field, enter @ or leave blank (other DNS records might indicate which one you need)
- In the Time to Live (TTL) field, enter 3600 or leave the default
- In the Value/Answer/Destination field, enter: v=spf1 include:_spf.google.com ~all and Save the TXT record
How to Enable DKIM for GSuite
To set up your DKIM record with Google GSuite or edit your current SPF record to include GSuite, follow the steps below:
- Generate the public domain key for your domain
- Add the key to your domain’s DNS records so recipients can retrieve it for reading the DKIM header
- Activate email signing to begin adding the DKIM header to outgoing mail messages
Note: Skip the first two steps if you purchased your domain from one of Google’s domain host partners during G Suite signup. Google automatically generates the domain key and adds the necessary DNS record when you turn on authentication.
If you already have a DKIM domain key for your domain (e.g., if your legacy mail server signs outgoing mail), you still need to generate a separate key for G Suite to utilize. The G Suite domain key differs from any other key by a string known as a selector prefix. The selector prefix for the G Suite domain key is “google” by default, but you can enter a new selector prefix when you generate the key if preferred.