How to Set Up DKIM for Google Workspace

Sure, here is the revised article based on the steps from Google's documentation:

How to Set Up DKIM for Google Domains

Introduction

DomainKeys Identified Mail (DKIM) is essential for protecting against spoofing, phishing, and ensuring your emails are not marked as spam. This guide will help you set up DKIM for your domain by obtaining your DKIM key, adding it to your domain provider, and enabling DKIM authentication.

Automatic DKIM Setup with Google Domains

If you are using Google Domains as your domain provider, Google will automatically create and add a DKIM key to your domain’s DNS records when you set up Google Workspace. You can directly enable DKIM in your Admin console.

Step 1: Obtain Your DKIM Key from the Admin Console

Prerequisites

• You must be signed in as a super administrator to complete these steps.
• After enabling Gmail for your organization, wait 24–72 hours before obtaining your DKIM key.

Steps

1. Sign in to your Admin Console:

   • Go to Menu > Apps > Google Workspace > Gmail.
   • Click on Authenticate Email.

2. Select Your Domain:

   • In the Selected domain menu, choose the domain for which you want to set up DKIM.

3. Generate a New DKIM Record:

   • Click the Generate New Record button.
   • In the Generate new record box, choose your DKIM key settings:
     • DKIM key bit length:
       • 2048: Select if supported by your domain provider. It offers better security.
       • 1024: Select if your domain provider does not support 2048-bit keys.
     • Prefix selector:
       • Use the default prefix google. If your domain already uses this prefix, choose a different one.

4. Generate and Copy DKIM Values:

   • Click Generate. The TXT record value will update to a new value.
   • Copy the following:
     • DNS Host name (TXT record name): The name for the DKIM TXT record.
     • TXT record value (DKIM key): The DKIM key itself.

Step 2: Add the DKIM Key to Your Domain

1. Log in to Your Domain Provider:

   • Access the DNS settings for your domain.

2. Add a TXT Record for DKIM:

   • Enter the DNS Host name (TXT record name) in the Host field.
   • Enter the TXT record value (DKIM key) in the TXT Value field.
   • Save your changes.

Important Considerations

• TXT Record Length: Some domain providers limit TXT record length. Refer to your provider's documentation if needed.
• DKIM Activation: It can take up to 48 hours for DKIM authentication to become active.
• Multiple Domains: If setting up DKIM for multiple domains, repeat these steps for each domain.
• Subdomains: For subdomains, additional steps may be required.

Step 3: Enable DKIM Signing

1. Return to the Admin Console:

   • Go to Menu > Apps > Google Workspace > Gmail.
   • Click on Authenticate Email.

2. Select Your Domain:

   • Choose the domain where you want to enable DKIM.

3. Start Authentication:

   • Click the Start authentication button. The status will update to indicate that DKIM is active.

Step 4: Verify DKIM Authentication

1. Send a Test Email:

   • Send an email to a Gmail or Google Workspace account (not to yourself).

2. Check the Message Header:

   • In the recipient's inbox, view the message header. In Gmail, click More > Show Original.
   • Look for Authentication-Results. It should indicate DKIM=pass or DKIM=OK.

Troubleshooting

• If DKIM is not indicated in the header, verify that you have completed all steps correctly.
• Refer to troubleshooting resources if issues persist.

Turning off DKIM

We do not recommend turning off DKIM, as it helps prevent email spoofing and phishing. If necessary, follow the appropriate steps to disable it securely.

By following these steps, you can set up DKIM for your domain, enhancing your email security and deliverability. If you encounter any issues, consult your domain provider's support resources.