ESP AUTHENTICATION GUIDESPF Lookups: 3 / 10DKIM Type: TXTBIMI: Supported
How to Set Up SPF & DKIM for Google Workspace (Gmail): DNS Authentication Guide
Configure authoritative DNS records for Google Workspace (Gmail). Prevent spoofing, maintain high inbox placement at Google & Yahoo, and verify alignment without exceeding RFC 7208 lookup limits.
Required DNS Records for Google Workspace (Gmail)
1. Sender Policy Framework (SPF)
Type: TXTHost / Name:@
Value / Content:
v=spf1 include:_spf.google.com ~allUses 3 of your domain's 10 allowed DNS lookups under RFC 7208. Do not add duplicate SPF TXT records.
2. DomainKeys Identified Mail (DKIM)
Type: TXTSelector / Host Name:google._domainkey
Target / Key Content:
google.domainkey.yourcompany.comDelegates cryptographic signing to Google Workspace (Gmail). Alignment mode is set to relaxed.
Recommended DMARC Policy for Google Workspace (Gmail)
Once both SPF and DKIM are verified on your domain, enforce DMARC to prevent attackers from sending unauthorized emails spoofing your brand:
v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourcompany.com; pct=100; aspf=r; adkim=rVendor Resources & RFC Standards
Live DNS & SPF Analyzer
Run SPF & DKIM AuditVerify Your Google Workspace (Gmail) SPF & DKIM Records in Real-Time
Test your authoritative domain now to check DNS lookup limits, evaluate DMARC alignment, and ensure 100% deliverability to Google and Microsoft inboxes.