--- title: "Learning to Setup SPF, DKIM, and DMARC in Google Workspace | DMARC Report" description: "In November 2022, the Google Workspace team saw a spike in phishing and spoofing emails targeted toward Gmail users." image: "https://dmarcreport.com/og/blog/learning-to-setup-spf-dkim-and-dmarc-in-google-workspace.png" canonical: "https://dmarcreport.com/blog/learning-to-setup-spf-dkim-and-dmarc-in-google-workspace/" --- Quick Answer In November 2022, the Google Workspace team saw a spike in phishing and spoofing emails targeted toward Gmail users. As a result, Google blocked almost 231 billion emails in just two weeks. That’s why experts suggest configuring SPF, DKIM, and DMARC records in Google Workspace, and this guide explains the steps for that. Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Learning%20to%20Setup%20SPF%2C%20DKIM%2C%20and%20DMARC%20in%20Google%20Workspace&url=undefined%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F&title=Learning%20to%20Setup%20SPF%2C%20DKIM%2C%20and%20DMARC%20in%20Google%20Workspace "Share on Reddit") [ ](mailto:?subject=Learning%20to%20Setup%20SPF%2C%20DKIM%2C%20and%20DMARC%20in%20Google%20Workspace&body=Check out this article: undefined%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F "Share via Email") ![Setup Google Workspace](https://media.mailhop.org/dmarcreport/images/2024/01/how-to-create-dmarc-record.jpg) ## Try Our Free DMARC Checker Validate your DMARC policy, check alignment settings, and verify reporting configuration. [ Check DMARC Record → ](/tools/dmarc-checker/) In November 2022, the Google Workspace team saw a [spike in phishing](https://www.bbc.com/news/technology-39845545) and spoofing emails targeted toward [Gmail users](/blog/how-gmail-users-are-affected-by-updated-retvec-system/). As a result, Google blocked almost [231 billion emails](https://www.darkreading.com/remote-workforce/google-blocks-231b-spam-phishing-messages-2-weeks) in just two weeks. That’s why experts suggest configuring [SPF](/dmarc-fundamentals/what-is-spf/), DKIM, and DMARC records in Google Workspace, and this guide explains the steps for that. If you are new to how these three protocols differ, our [SPF vs DKIM vs DMARC](/blog/spf-vs-dkim-vs-dmarc-difference-explained-2026/) guide breaks it down. ## Setting Up SPF For Google Workspace An SPF record contains a list of [allowlisted IP addresses](https://nordvpn.com/blog/what-is-allowlisting/) and mail servers that send emails on your behalf. Here are steps to add **SPF for your domain** in Google Workspace: - [Create an SPF record](/topic/creating-an-spf-record/) and incorporate the ‘_include:\_spf.google.com_’ mechanism. - Copy your newly generated SPF record. - Add the newly generated SPF record to your **DNS provider**. You can use an online [SPF record generator](/tools/spf-record-generator/) to build the record quickly and avoid syntax mistakes. That’s it, and you are done. Please ensure you don’t have multiple [SPF records](/topic/spf-dns-record-syntax-explained/) corresponding to a single domain. This will trigger the ‘Multiple SPF Records’ [SPF Permerror](/blog/fix-spf-permerror-overcome-too-many-dns-lookups/). Also, if multiple IP ranges, **ESPs, or third parties** are involved in your [email infrastructure](/blog/protecting-your-email-infrastructure-with-dmarc-for-office-365/), include them in the same record to avoid errors. ![email authentication](https://media.mailhop.org/dmarcreport/images/2024/01/how-to-create-dmarc-record-4739.jpg) ## Setting Up DKIM For Google Workspace Visit the [Google Admin Console](https://admin.google.com/ac/accountchooser?continue=https://admin.google.com/) and follow these steps: - Select ‘Apps.’ - Select ‘G Suite.’ - Select ‘Gmail.’ - Go to ‘Authenticate email (set up [email authentication](/blog/why-email-authentication-matters-for-businesses/) (DKIM)). - _Select the domain for which you want to set up DKIM_. - Next, select ‘Generate New Record,’ and you will get the **GSuite DKIM Public key**. Copy the key value. Please ensure that you choose a [DKIM key](/blog/what-is-gappssmtp-and-how-to-set-up-a-custom-dkim-key-for-your-emails/) length of 1024-bit or higher. Shorter keys are more prone to exploitation. - Publish the provided **TXT Record into your DNS**. - Lastly, navigate to the administrator console and select ‘Start Authentication.’ ## Setting Up DMARC For Google Workspace After successfully integrating SPF and DKIM into your Google Workspace, the next step in enhancing your email security involves [setting up Gmail DMARC](/setting-up-google-workspace-or-gmail-dmarc-to-prevent-spoofing-phishing/). Configuring the **Gmail DMARC record** is a crucial procedure in this process. You can [set up a DMARC record](/create-dmarc-record/) in just a few minutes once SPF and DKIM are already in place. To begin with, use an online [DMARC record generator](/dmarc-record-generator/) to produce a DMARC record and publish it in your DNS. You can start with the **‘none’ or ‘quarantine’ policy** and aim to [move to the ‘reject’ policy](/blog/switch-from-pquarantine-to-preject-in-dmarc/) to receive the maximum benefits of [email security](/blog/why-is-email-security-important-for-businesses-today-2/) through SPF, DKIM, and DMARC. ![DMARC policy](https://media.mailhop.org/dmarcreport/images/2024/01/gmail-dmarc-4-1.jpg) A domain protected with a ‘DMARC reject policy’ is safe from [email spoofing](https://www.scmagazine.com/news/gmail-spoofing-google-priority-1-probe) and has a good [email deliverability rate](https://sleeknote.com/advanced/ecommerce-glossary/what-is-email-deliverability-rate-a-comprehensive-guide), which means legitimate emails from your domain are more likely to reach the inbox instead of getting marked as rejected or spam. ## Final Thoughts Visit the [Google Admin Toolbox Check MX](https://toolbox.googleapps.com/apps/checkmx/) to see a report **confirming the existence** of your SPF record and setups of [DKIM](/dmarc-fundamentals/what-is-dkim/) and DMARC. If you still need to build your record, our [DMARC record generator tool](/tools/dmarc-record-generator/) produces a valid string instantly. Although using **‘ruf’ and ‘rua’ tags** in your [DMARC record](/dmarc-record/) to receive forensic and aggregate reports isn’t mandatory, we highly encourage this practice. [DMARC reports](/understanding-dmarc-reports/) tell you if an [illegitimate entity is exploiting your domain](https://crypto.news/hackers-hijack-frax-finance-dns-domain/) or if some of your legitimate emails are experiencing false positives. We at [DMARCReport](/) offer **reporting solutions for MSPs**, service providers, and businesses to support their fight against [phishing and spoofing](https://www.infosecurity-magazine.com/news/phishing-sites-and-apps-use/). [Book a demo](/book-a-demo/) with us and get started. One of our **security consultants** will get in touch with you via email in one business day. Till then, feel free to read our reviews. ## Topics [ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ Gmail DMARC ](/tags/gmail-dmarc/)[ SPF ](/tags/spf/) ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead for DMARC Report's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Take control of your DMARC reports Turn raw XML into actionable dashboards. Start free - no credit card required. [Start Free Trial](https://app.dmarcreport.com/signup?plan=free) [Check Your DMARC Record](/tools/dmarc-checker/) Scan Your Domain Now Instantly scan your domain for DKIM, SPF, and DMARC issues Check My Domain Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F) [ ](https://twitter.com/intent/tweet?text=Learning%20to%20Setup%20SPF%2C%20DKIM%2C%20and%20DMARC%20in%20Google%20Workspace&url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fdmarcreport.com%2Fblog%2Flearning-to-setup-spf-dkim-and-dmarc-in-google-workspace%2F) Copy Related Articles - [ ![CRM Platforms for Email Marketing](https://media.mailhop.org/dmarcreport/images/2026/05/what-is-dmarc-6009.jpg) Best CRM Platforms for Email Marketing Success Uncategorized ](/blog/best-crm-platforms-for-email-marketing-success/) - [ ![dmarc-report](https://media.mailhop.org/dmarcreport/images/2026/04/dmarc-report-0610.jpg) Best DMARC Solutions for Healthcare Organizations in 2026 Uncategorized ](/blog/best-dmarc-solutions-for-healthcare-organizations-in-2026/) - [ ![Email Security](https://media.mailhop.org/dmarcreport/images/2025/10/dmarc-check-5211.jpg) Best DMARC Tools for 2025 Uncategorized ](/blog/best-dmarc-tools-for-2025/) - [ ![DMARC-generato](https://media.mailhop.org/dmarcreport/images/2026/04/DMARC-generato-8854.jpg) Best Email Authentication Platforms for PCI DSS v4.0 Compliance in 2026 Uncategorized ](/blog/best-email-authentication-platforms-for-pci-dss-v4-0-compliance-2026/) ## Related Articles [ Uncategorized 8m Best CRM Platforms for Email Marketing Success May 12, 2026 ](/blog/best-crm-platforms-for-email-marketing-success/)[ Uncategorized 16m Best DMARC Solutions for Healthcare Organizations in 2026 May 1, 2026 ](/blog/best-dmarc-solutions-for-healthcare-organizations-in-2026/)[ Uncategorized 8m Best DMARC Tools for 2025 Oct 9, 2025 ](/blog/best-dmarc-tools-for-2025/)[ Uncategorized 12m Best Email Authentication Platforms for PCI DSS v4.0 Compliance in 2026 Apr 27, 2026 ](/blog/best-email-authentication-platforms-for-pci-dss-v4-0-compliance-2026/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"471","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Learning to Setup SPF, DKIM, and DMARC in Google Workspace","description":"In November 2022, the Google Workspace team saw a spike in phishing and spoofing emails targeted toward Gmail users.","url":"https://dmarcreport.com/blog/learning-to-setup-spf-dkim-and-dmarc-in-google-workspace/","datePublished":"2024-01-02T19:49:11.000Z","dateModified":"2025-06-12T17:16:35.000Z","dateCreated":"2024-01-02T19:49:11.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://dmarcreport.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"471","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/learning-to-setup-spf-dkim-and-dmarc-in-google-workspace/"},"articleSection":"uncategorized","keywords":"dkim, DMARC, email security, Gmail DMARC, SPF","wordCount":523,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2024/01/how-to-create-dmarc-record.jpg","caption":"Setup Google Workspace","width":900,"height":641},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Uncategorized","item":"https://dmarcreport.com/uncategorized/"},{"@type":"ListItem","position":4,"name":"Learning to Setup SPF, DKIM, and DMARC in Google Workspace","item":"https://dmarcreport.com/blog/learning-to-setup-spf-dkim-and-dmarc-in-google-workspace/"}]} ```