G SUITE DKIM SETUP

  • In the previous tutorial we set up SPF Record to differentiate genuine emails from spam emails.
  • In this part of G Suite Setup guide, I will show you how to set up another security measure called DKIM (Domain Keys Identified Mail).
  • Watch a video guide or continue reading to learn how you can correctly setup G Suite DKIM with your domain.
Setup G Suite DKIM
Play Video

DKIM Overview

  • Using a simple analogy of a bank, let me try to help you understand how DKIM basically works.
  • When you send someone with a check, a bank verifies your signature with what they have stored in their database.
  • If the signature doesn't match, it's considered forgery. More or less, DKIM works in a similar fashion.

1. Login to G Suite console.

  • To do that, from you Gmail inbox, click on the dotted square icon on the right, then click on 'Admin'.

1. Login to Godaddy

  • In this guide, I show you how to setup DKIM using Godaddy but this is a similar procedure with a different domain provider.
  • On Godaddy, login then go to "My Products" page then under domain click on "DNS"

3. Search 'DKIM' from G Suite Console

  • Next, go back to your G Suite admin console and search for 'DKIM'.
  • From the search results, click on 'Authenticate email'.

4 Click on 'Authenticate email'

  • From step 3 above, you'll land on a similar page in the screenshot.
  • Click on "Authenticate email" link from list

5. Generate new record (Part 1)

  • To generate a new record, firstly choose a domain you want to generate a new record for. That's if you have more than one.
  • Next, click on "Generate new record" link then continue.

6. Generate new record (Part 2)

  • From above step, you will see similar form like one in the screenshot.
  • In the first part, you select DKIM length. I recommend you choose 2048 value because the longer the key the more secure it. Unless advised by your registrar.
  • In part two, you can type a text for your reference. You may leave it as it is. Then click on "Generate" link.

7. Copy generated record

  • This screen shows that you've successfully generated a new record value which you'll use in our coming steps.
  • You'll copy and use these values in our next steps.

8. Create TXT record in Godaddy

  • Now go back to your registrar, Godaddy in this case and create a new TXT record.
  • To create a new TXT Record in Godaddy, click on the "ADD" button from DNS page.

9. Paste in Record values

  • From previous step you see a similar form. First choose "TXT" in field (1) as record type.
  • In field (2) copy and paste host value from our step 7 above.
  • Field (3) of the form is where you paste TXT value you generated in step 7 of this tutorial. Then click "Save".

10. Click "Start Authentication"

  • Lastly, you will let G Suite authenticate the record you just added. You do that by clicking on "Start authentication".
  • However, you may have to wait for some time and try again if the first attempt fails. In my experience it takes less than 30 minutes.

Successful Authentication

  • On a successful authentication, G Suite will give you a green notification like one in the screenshot.
  • This means that your DKIM record has successfully been set up and your emails will now be super secure.
  • That is it, for comments and questions, leave them in comment section below and I'll be happy to help.