In order to authorise Gsuite to send emails on your behalf you will need to create an SPF record that includes the following value:
include:_spf.google.com <-- this part allows all Gsuite IPs to send emails on your behalf.
If you already have an existing SPF record you will just have to copy the include include:_spf.google.com and append it to your current SPF record, however, it has to be put after the v=spf1 and before the ~all ending mechanism in your record.
If you already have an existing SPF record such as:
v=spf1 include:mail.zendesk.com ~all
and you would like to add Gsuite as an additional sending service, you will have to copy the include include:_spf.google.com and append it to your current SPF record. The final SPF record should look like this:
v=spf1 include:mail.zendesk.com include:_spf.google.com ~all
DO NOT CREATE A SECOND SPF RECORD IF YOU ALREADY HAVE ONE.
You should only have one SPF record per domain / subdomain.
To learn more about SPF and how to configure it for Google Workspace please click on the button below.
In order to implement DKIM for your domain you will have to follow the steps below.
Login as administrator and go to the Admin Console.
Go to Apps --> G Suite
3. Click on the Gmail app.
4. Click on Authenticate email
5. For the key length you can choose between 1024 or 2048. The longer the key the better, however, some DNS providers do not support keys longer than 1024. They should be able to implement 2048 as well but there may be some additional work that needs to be carried out.
6. Select your prefix selector, you can leave the default of "google" or type in your own. This will be your DKIM selector.
7. Once the key is generated, you will need to take the information provided and put it in your DNS ie. create the TXT record.
It will look like the example below, except that you will have to replace the word "selector" below with the one that you created earlier.
NOTE: it may take up to 48 hours for the DNS changes to propagate.
Also, you can't add a custom DKIM selector for 24 hours.
For more information please click on the button below.
Create a free OnDMARC account to test your configuration.