How to configure DKIM/SPF/DMARC in G Suite

Overview

Steps for configuring DKIM, SPF and DMARC in G Suite in order to improve email deliverability.

Replace example.com with your domain.

Steps

I. Configure DKIM

1. Login to your GSuite admin panel: https://admin.google.com/
2. Click Apps
3. Click G Suite
4. Click Gmail
5. Click Authenticate email
6. Click Generate new record
7. Click Generate
8. Update your DNS with the TXT record
9. Click Start authentication
10. Test DKIM is set up by using the G Suite Check MX tool: https://toolbox.googleapps.com/apps/checkmx/check

II. Configure SPF

1. Create a new TXT record in your DNS with the name example.com and the following content:

v=spf1 include:_spf.google.com ~all

2. If you already have a SPF record (for example, because you’re using Mailchimp), then add a separate include as seen below:

v=spf1 include:_spf.google.com include:servers.mcsv.net ~all

3. Test SPF is set up by using the G Suite Check MX tool: https://toolbox.googleapps.com/apps/checkmx/check

III. Configure DMARC

Optionally set up an email alias, group or forwarder for DMARC email. Otherwise use a real email address.

Only configure DMARC once DKIM and SPF have been set up and running, ideally for at least 48 hours.

1. Create a new TXT record in your DNS with the name _dmarc.example.com and the following content:

v=DMARC1; p=none; rua=mailto:[email protected]

2. Test DMARC is set up by using the G Suite Check MX tool: https://toolbox.googleapps.com/apps/checkmx/check