Email authentication is essential for protecting your domain’s reputation and ensuring reliable email delivery. If you’re using Google Workspace for your business email, configuring SPF and DKIM records is one of the most important steps you can take to prevent email spoofing and improve deliverability.

In this guide, we’ll show you how to configure SPF and DKIM records for your domain hosted with eGlueWeb.

What Are SPF and DKIM Records?

SPF (Sender Policy Framework)

SPF is a DNS record that specifies which mail servers are authorized to send emails on behalf of your domain. This helps prevent spammers from sending fraudulent emails that appear to come from your business.

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to your outgoing emails. Receiving mail servers can verify this signature to confirm that the message was sent by an authorized source and was not modified during transmission.

Why Configure SPF and DKIM?

Setting up SPF and DKIM provides several benefits:

• Improves email deliverability
• Reduces the chance of emails landing in spam folders
• Protects your domain from spoofing attacks
• Enhances trust with customers and recipients
• Helps meet Google’s email authentication requirements for business email senders

How to Configure SPF for Google Workspace

Step 1: Access Your DNS Zone

Log in to your hosting control panel or DNS management portal where your domain’s DNS records are managed.

Step 2: Create an SPF TXT Record

Add a new TXT record with the following value:
v=spf1 include:_spf.google.com ~all

This record authorizes Google’s mail servers to send emails on behalf of your domain.

Step 3: Save the Record

Save your DNS changes and allow time for DNS propagation.

How to Configure DKIM for Google Workspace

Step 1: Generate a DKIM Key

1. Log in to the Google Admin Console.
2. Navigate to:

Apps → Google Workspace → Gmail → Authenticate Email

3. Select your domain.
4. Click Generate New Record.
5. Choose a 2048-bit key if supported.

Step 2: Add the DKIM TXT Record

Google will provide:

• Host Name (Selector)
• TXT Value

Create a new TXT record in your DNS zone using the values provided by Google.
The record will resemble:
Host:
google._domainkey

Value:
v=DKIM1; k=rsa; p=XXXXXXXXXXXXXXXX

Replace the value with the actual key generated by Google Workspace.

Step 3: Start Authentication

After DNS propagation:

1. Return to the Google Admin Console.
2. Open the DKIM configuration page.
3. Click Start Authentication.

Google will begin signing outgoing emails using your DKIM key.

Verify Your Configuration

After adding SPF and DKIM records:

• Wait for DNS propagation (typically a few minutes to 48 hours).
• Use online SPF and DKIM validation tools.
• Send test emails to Gmail and verify authentication results in the email headers.

Bonus: Consider Adding DMARC

For enhanced email security, you can also configure a DMARC record. DMARC works alongside SPF and DKIM to tell receiving mail servers how to handle emails that fail authentication checks.
A basic DMARC record looks like:
v=DMARC1; p=none;

You can later strengthen the policy to quarantine or reject unauthorized emails.

Need Help Configuring Google Workspace?

The eGlueWeb technical team can assist with:

• Google Workspace setup
• SPF configuration
• DKIM setup
• DMARC implementation
• DNS management
• Email migration and troubleshooting

📞 Call Us: +91 62385 03057
💬 WhatsApp Support: Available 24/7
Our experts can help ensure your email authentication records are configured correctly for maximum deliverability and security.

Conclusion

Configuring SPF and DKIM records is a critical step when using Google Workspace for business email. These DNS records help protect your domain, improve email delivery rates, and reduce the risk of email spoofing.
If you need assistance with Google Workspace or DNS configuration, eGlueWeb is here to help with expert support and reliable hosting solutions.