SentraDMARC

Google Workspace

How to authorize Google Workspace for SPF and DKIM. What you do depends on whether SentraDMARC hosts your SPF and DKIM (Business and above) or you manage the records yourself.

SPF

Google's SPF include is include:_spf.google.com.

  • If SentraDMARC hosts your SPF, do not edit the record at your DNS host. Add Google on the SPF page, or press Add to your SPF on the Google sender card on the DMARC page. We republish your hosted record.
  • If you manage SPF yourself, add the include to your existing record, before its ~all or -all. Keep exactly one v=spf1 record.

DKIM

Google Workspace gives you a TXT key. It does not rotate it for you: a new key is one you generate in the Admin console.

  1. In the Google Admin console, go to Apps → Google Workspace → Gmail → Authenticate email and select your domain.
  2. Click Generate new record and keep the 2048-bit key length. Google shows a host name (usually google._domainkey) and a TXT value.
  3. If SentraDMARC hosts your DKIM: on the DKIM page, choose the Google Workspace preset, paste the value, and publish. Then add the CNAME the page shows at google._domainkey on your domain. If a TXT record already sits at that name, delete it first: a CNAME cannot share a name with another record.
  4. If you manage DKIM yourself: add the TXT record at your DNS host.
  5. Once the record resolves, return to the Admin console and click Start authentication.