Google Workspace: stop your emails going to spam
Three records, in this order. Each step links to Google Workspace's own instructions. Re-run the check and test email when you're done.
1. SPF
Add (or edit) the TXT record on your domain's root name:
v=spf1 include:_spf.google.com ~all
Only one SPF record per domain. If other tools also send for you (a CRM, a newsletter service), build the combined record rather than adding a second one.
Google: Set up SPF · checked Oct 2026
2. DKIM
- In the Google Admin console go to Apps → Google Workspace → Gmail → Authenticate email.
- Select your domain, click Generate new record (2048-bit), and copy the TXT record it shows. The name is google._domainkey.
- Add that TXT record in your domain's DNS, wait up to 48 hours, then click Start authentication in the same screen.
Google: Turn on DKIM · checked Oct 2026
3. DMARC
Add a TXT record named _dmarc with this starter value, replacing the address with one you read:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
p=none only monitors. After a few weeks of clean reports, change it to p=quarantine, then p=reject.