Fix guide

How to set up DKIM in Google Workspace

Switch on DKIM signing for your Google Workspace domain in about ten minutes.

What you need

A Google Workspace super admin login and access to your domain’s DNS. It takes about ten minutes, plus a short wait for DNS. Add the SPF record for Google Workspace at the same time.

Switch on DKIM in Google Workspace

1

Open the Admin console. Go to Apps › Google Workspace › Gmail › Authenticate email.

2

Pick your domain and generate a record. Click Generate new record, choose a 2048-bit key and keep the selector as google.

3

Copy the two values. The DNS host name is google._domainkey and the TXT value starts with v=DKIM1; k=rsa; p=.

4

Add a TXT record at your DNS provider (in GoDaddy, see how to add a TXT record in GoDaddy). Use the host name and value exactly as shown. Some providers split long values into parts automatically; that is fine.

5

Click Start authentication. Wait until the DNS record shows up (often minutes, up to 48 hours), then return to Authenticate email and click Start authentication.

If your DNS provider rejects the value

A few older providers limit TXT records to 255 characters. Split the key into two quoted strings in the same record, or generate a 1024-bit key instead and upgrade later.

Check it worked

Enter your domain. The checker tries the google selector first for Google Workspace domains.