How to Setup Google Workspace Email DNS Records

Google Workspace (formerly G Suite) helps you easily create a professional email address for your business. Their plans start with 30 GB of Storage per mailbox with features like two-factor authentication, phishing protection, etc. It is one of the best business email hosting solutions available on the market.

To setup your business email with Google Workspace G Suite you need to configure MX and SPF records for your Domain. This guide covers the above Google Workspace mandatory records and other optional Google email DNS records like DKIM and DMARC.

Google Workspace MX Records

Google WorkSpace MX records values are as follows:

Name/Host/AliasPriorityValue/Destination
Blank or @1ASPMX.L.GOOGLE.COM
Blank or @5ALT1.ASPMX.L.GOOGLE.COM
Blank or @5ALT2.ASPMX.L.GOOGLE.COM
Blank or @10ALT3.ASPMX.L.GOOGLE.COM
Blank or @10ALT4.ASPMX.L.GOOGLE.COM
Delete all existing MX records for your domain and add these records

Useful Tips:
1) Provide a lower TTL value allowed by your Hosting/Domain provider for all these records. This helps to fasten the DNS Propagation time.

2) If you have signed up after April 2023, then either you can use above 5 MX records (or) just one MX record below.
Name/Host/AliasPriorityValue/Destination
Blank or @1SMTP.GOOGLE.COM

Google WorkSpace SPF Records

SPF Record helps prevent messages from being marked as spam.

Record TypeName/Host/AliasValue/Destination
TXTBlank or @v=spf1 include:_spf.google.com ~all

If there is an existing SPF record then you can specify as below:

Record TypeName/Host/AliasValue/Destination
TXTBlank or @v=spf1 +a include:_spf.google.com ~all

Google WorkSpace DKIM Setup

DKIM Record protects against spoofing & phishing and helps prevent messages from being marked as spam.

To enable DKIM email authentication and set up DKIM Record, follow the steps below:

  1. Sign in to your Google Admin console
  2. In the Admin console, go to Menu >> Apps >> Google Workspace >> Gmail
  3. Click Authenticate email
  4. In the Selected Domain menu, select the domain where you want to set up DKIM
  5. Click the Generate New Record button
  6. In the Generate new record box, select your DKIM key settings. DKIM key bit length select 2048 or 1024 that your domain provider supports. The default selector prefix is google. We recommend you use the default
  7. At the bottom of the Generate new record box, click Generate. On the settings page, the text string beneath the TXT record value changes to a new value, and this message is displayed: DKIM authentication settings updated
  8. Add the DKIM record for your domain
Record TypeName/Host/AliasValue/Destination
TXTgoogle._domainkeypaste the above-generated DKIM value

Google WorkSpace DMARC Settings

DMARC record helps protect against spoofing & phishing. This instructs the receiving mail server what to do with messages that don’t pass authentication. You can configure the DMARC record based on your preference.

No Action DMARC Record

Configuring the DMARC record as below will take no action on the message and deliver it to the intended recipient. And sends a daily report to the email address mentioned in the rua DMARC record tag.

Record TypeName/Host/AliasValue/Destination
TXT_dmarcv=DMARC1; p=none; rua=mailto:[email protected]

Quarantine DMARC Record

Configuring the DMARC record as below will mark the messages as spam and send them to the recipient’s spam folder. Recipients can review spam messages to identify legitimate messages. And sends a daily report to the email address mentioned in the rua DMARC record tag.

Record TypeName/Host/AliasValue/Destination
TXT_dmarcv=DMARC1; p=quarantine; rua=mailto:[email protected]; pct=100; adkim=s; aspf=s

Strict/Reject DMARC Record

Configuring the DMARC record as below will reject the message. With this option, the receiving server usually sends a bounce message to the sending server. And sends a daily report to the email address mentioned in the rua DMARC record tag.

Record TypeName/Host/AliasValue/Destination
TXT_dmarcv=DMARC1; p=reject; rua=mailto:[email protected]; pct=100; adkim=s; aspf=s

Leave a Comment