Google Workspace DKIM Setup

  • In the previous tutorial we set up SPF Record to differentiate genuine emails from spam emails.
  • In this part of Google Workspace Setup guide, I will show you how to set up another security measure called DKIM (Domain Keys Identified Mail).
  • Watch a video guide or continue reading to learn how you can correctly setup Google Workspace DKIM with your domain.

DKIM Overview

  • Using a simple analogy of a bank, let me try to help you understand how DKIM basically works.
  • When you send someone with a check, a bank verifies your signature with what they have stored in their database.
  • If the signature doesn't match, it's considered forgery. More or less, DKIM works in a similar fashion.

1. Login to Google Workspace console.

  • To begin DKIM setup, first login to your Google Workspace admin console.
  • To do that, from you Gmail inbox, click on the dotted square icon on the right, then click on 'Admin'.
go to g suite admin

1. Login to Godaddy

  • In this guide, I show you how to setup DKIM using Godaddy but this is a similar procedure with a different domain provider.
  • On Godaddy, login then go to "My Products" page then under domain click on "DNS"
log into godaddy and then go to DNS

3. Search 'DKIM' from Google Workspace Console

  • Next, go back to your Google Workspace admin console and search for 'DKIM'.
  • From the search results, click on 'Authenticate email'.
Search DKIM in G suite admin console

4 Click on 'Authenticate email'

  • From step 3 above, you'll land on a similar page in the screenshot.
  • Click on "Authenticate email" link from list
click on authenticate email

5. Generate new record (Part 1)

  • To generate a new record, firstly choose a domain you want to generate a new record for. That's if you have more than one.
  • Next, click on "Generate new record" link then continue.
click on generate new record

6. Generate new record (Part 2)

  • From above step, you will see similar form like one in the screenshot.
  • In the first part, you select DKIM length. I recommend you choose 2048 value because the longer the key the more secure it. Unless advised by your registrar.
  • In part two, you can type a text for your reference. You may leave it as it is. Then click on "Generate" link.
generating new record in Google Workspace

7. Copy generated record

  • This screen shows that you've successfully generated a new record value which you'll use in our coming steps.
  • You'll copy and use these values in our next steps.
copy generated record in Google Workspace to Godaddy

8. Create TXT record in Godaddy

  • Now go back to your registrar, Godaddy in this case and create a new TXT record.
  • To create a new TXT Record in Godaddy, click on the "ADD" button from DNS page.
click ADD button on Goddaddy

9. Paste in Record values

  • From previous step you see a similar form. First choose "TXT" in field (1) as record type.
  • In field (2) copy and paste host value from our step 7 above.
  • Field (3) of the form is where you paste TXT value you generated in step 7 of this tutorial. Then click "Save".
paste record values into Godaddy

10. Click "Start Authentication"

  • Lastly, you will let Google Workspace authenticate the record you just added. You do that by clicking on "Start authentication".
  • However, you may have to wait for some time and try again if the first attempt fails. In my experience it takes less than 30 minutes.
click on start authentication in gsuite admin console

Successful Authentication

  • On a successful authentication, Google Workspace will give you a green notification like one in the screenshot.
  • This means that your DKIM record has successfully been set up and your emails will now be super secure.
  • That is it, for comments and questions, leave them in comment section below and I'll be happy to help.
successful record authentication in G suite console

Related Posts