How to Setup Google Workspace Email with DNS (TXT, SPF, DKIM, DMARC, MX)

This article is here to show you a step by step walkthrough of setting up a Google workspace domain and email with emphasis on the steps you need to do in your DNS records.

 

We will use Cloudflare for our DNS provider but any DNS provider will do.


Don't Feel Like Reading? We Made a Video Explaining the Full Details of the Topic. Click Here to Scroll Down to The Video

#1 Register Google Workspace

  1. Visit https://admin.google.com and register your account and domain.
  2. On left hand side, click on "Account" and "Manage Domains".
  3. Click on "Add a Domain" and follow instructions.

 

#2 Verify Domain

  1. Verify your domain by either logging into your DNS provider or adding manually your TXT or CNAME record.

 

#3 Setup MX Records

  1. Setup your mail servers. 
  2. Click on "Activate gmail" and following instructions. You will be prompted to add 5 MX records.

 

#4 Create Emails

  1. On left hand side, click on "Directory" and "Users"
  2. Click on "Add New User" and fill out all information.
  3. In new window, login to gmail.com to verify user can login.

 

#5 Setup SPF Record

  1. Add a TXT record to allow google mail servers to send on your behalf. Use v=spf1 include:_spf.google.com ~all

See url at https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F10684623%3Fhl%3Den&assistant_id=generic-unu&product_context=10684623&product_name=UnuFlow&trigger_context=a

 

#6 Setup DKIM Record

  1. Add outgoing email authentication via DKIM. 
  2. Visit https://admin.google.com/ac/apps/gmail/authenticateemail and click on "Generate Record".
  3. Copy and Paste the TXT record information in your DNS records.
  4. Click on "Start Authentication". 

 

#7 Setup DMARC Record

Protect against spoofing & phishing, and help prevent messages from being marked as spam

  1. Setup DNS TXT record with following: Hostname = _dmarc and value =  v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
  2. Replace "dmarc@yourdomain.com" with your reporting email.

NOTE: Make sure to check out our DMARC video for explanation about DMARC at  https://onescales.com/blogs/main/everything-dmarc

#8 Verify Setup

  1. Send and receive emails from your new email
  2. Check out our DMARC article for full details on how to verify your records

 

Additional Tools

  1. EasyDmarc

View Entire Topic Via Our Youtube Walkthrough:

Thank You For Reading Our Articles!

We're dedicated to providing real answers, valuable insights & efficient knowledge online. Through our content, we strive to share information that matters, leveraging technology to multiply efforts & minimize waste.

Your support is invaluable, so please subscribe, share, & help with your insight and engage with our amazing community!

Leave a comment

Please note, comments need to be approved before they are published.