What is Google WorkSpace?
Google Workspace (formerly G Suite) helps you easily create a professional email address for your business. Their plans start with 30 GB of Storage per mailbox with features like two-factor authentication, phishing protection, etc. It is one of the best business email hosting solutions available on the market. Apart from Email, it includes the other productivity apps Drive, Docs, Meet, and many more.
Getting Started with Google WorkSpace Gsuite
Now you can try Google WorkSpace free for 14 days at Zero cost. Simply, click on the button below to Sign up for a free trial.
Google WorkSpace Setup
To set up your business email with Google Workspace G Suite, you must configure MX and SPF records for your Domain. This guide covers the above Google Workspace mandatory records and other optional Google email DNS records like DKIM and DMARC. So to get first you need a Domain name. If you have already got one then it is fine. Otherwise, you can get a Domain free for 1 year by purchasing web hosting from any of the best web hosting providers.
Google Workspace MX Records
Google WorkSpace MX records values are as follows:
Name/Host/Alias | Priority | Value/Destination |
Blank or @ | 1 | ASPMX.L.GOOGLE.COM |
Blank or @ | 5 | ALT1.ASPMX.L.GOOGLE.COM |
Blank or @ | 5 | ALT2.ASPMX.L.GOOGLE.COM |
Blank or @ | 10 | ALT3.ASPMX.L.GOOGLE.COM |
Blank or @ | 10 | ALT4.ASPMX.L.GOOGLE.COM |
Useful Tips:
1) Provide a lower TTL value allowed by your Hosting/Domain provider for all these records. This helps to fasten the DNS Propagation time.
2) If you have signed up after April 2023, then either you can use above 5 MX records (or) just one MX record below.
Name/Host/Alias | Priority | Value/Destination |
Blank or @ | 1 | SMTP.GOOGLE.COM |
Google WorkSpace SPF Records
SPF Record helps prevent messages from being marked as spam.
Record Type | Name/Host/Alias | Value/Destination |
TXT | Blank or @ | v=spf1 include:_spf.google.com ~all |
If there is an existing SPF record then you can specify as below:
Record Type | Name/Host/Alias | Value/Destination |
TXT | Blank or @ | v=spf1 +a include:_spf.google.com ~all |
Google WorkSpace DKIM Setup
DKIM Record protects against spoofing & phishing and helps prevent messages from being marked as spam.
To enable DKIM email authentication and set up DKIM Record, follow the steps below:
- Sign in to your Google Admin console
- In the Admin console, go to Menu >> Apps >> Google Workspace >> Gmail
- Click Authenticate email
- In the Selected Domain menu, select the domain where you want to set up DKIM
- Click the Generate New Record button
- In the Generate new record box, select your DKIM key settings. DKIM key bit length select 2048 or 1024 that your domain provider supports. The default selector prefix is Google. We recommend you use the default
- At the bottom of the Generate new record box, click Generate. On the settings page, the text string beneath the TXT record value changes to a new value, and this message is displayed: DKIM authentication settings updated
- Add the DKIM record for your domain
Record Type | Name/Host/Alias | Value/Destination |
TXT | google._domainkey | paste the above-generated DKIM value |
Google WorkSpace DMARC Settings
DMARC record helps protect against spoofing & phishing. This instructs the receiving mail server what to do with messages that don’t pass authentication. You can configure the DMARC record based on your preference.
No Action DMARC Record
Configuring the DMARC record as below will take no action on the message and deliver it to the intended recipient. And sends a daily report to the email address mentioned in the rua DMARC record tag.
Record Type | Name/Host/Alias | Value/Destination |
TXT | _dmarc | v=DMARC1; p=none; rua=mailto:[email protected] |
Quarantine DMARC Record
Configuring the DMARC record as below will mark the messages as spam and send them to the recipient’s spam folder. Recipients can review spam messages to identify legitimate messages. And sends a daily report to the email address mentioned in the rua DMARC record tag.
Record Type | Name/Host/Alias | Value/Destination |
TXT | _dmarc | v=DMARC1; p=quarantine; rua=mailto:[email protected]; pct=100; adkim=s; aspf=s |
Strict/Reject DMARC Record
Configuring the DMARC record as below will reject the message. With this option, the receiving server usually sends a bounce message to the sending server. And sends a daily report to the email address mentioned in the rua DMARC record tag.
Record Type | Name/Host/Alias | Value/Destination |
TXT | _dmarc | v=DMARC1; p=reject; rua=mailto:[email protected]; pct=100; adkim=s; aspf=s |