The SPF record for Google Workspace
v=spf1 include:_spf.google.com ~all
Add it as a TXT record at the root of your domain (name @). This allows Google’s mail servers to send for your domain and marks everything else as suspicious. Google recommends ending with ~all.
If other services send email for you
Add their includes before the ending, in the same record. For example, Google Workspace with Mailchimp and SendGrid:
v=spf1 include:_spf.google.com include:servers.mcsv.net include:sendgrid.net ~all
Keep it to one SPF record and under 10 DNS lookups. The SPF record generator builds it and counts the lookups for you.
Add it step by step
Check for an existing SPF record. If there is one, edit it rather than adding a second: see multiple SPF records.
Check it with the SPF checker.
See what your record allows and how many lookups it uses.