Reviewed by: QuickDMARC Security Team · Email Authentication Specialists ·

Google Workspace DKIM

In Google Admin, generate a DKIM key, publish the TXT at Google's selector._domainkey, then start authentication and verify pass results.

What to configure

Complete the Admin console DKIM wizard, wait for DNS, click Start authentication, and confirm dkim=pass on outbound Gmail.

google._domainkey TXT  v=DKIM1; k=rsa; p=...

Common pitfalls

DKIM generated but never started, SPF duplicated after migrations, marketing tools sending as the primary domain without aligned DKIM.

How QuickDMARC helps

Monitor Google Workspace domains alongside Microsoft and ESP traffic in one DMARC program.

Frequently asked questions

Does Google publish DMARC for me?

No. You add the _dmarc TXT at your DNS host.

Bulk sender rules?

Google's sender guidelines expect SPF, DKIM, and DMARC for bulk senders—see our requirements page.

SPF only?

Insufficient. Enable DKIM and DMARC reporting.

Related resources