Setting up DKIM (DomainKeys Identified Mail) for Google Workspace helps ensure that your emails are authenticated and aligned with DMARC policies, improving email deliverability and protecting your domain from spoofing.
Sign in to Google Admin Console
Navigate to Gmail Settings
Go to Apps → Google Workspace → Gmail.
Authenticate Email
Click Authenticate email.
Select the domain for which you want to configure DKIM.
Generate DKIM Key
Click Generate new record.
Configure the following options:
DKIM key bit length: 2048-bit (recommended)
Prefix selector: Use the default "google" or customize if needed
Click Generate.
Add DKIM TXT Record to Your DNS
Type: TXT
Hostname: google._domainkey
Value: The DKIM public key provided by Google
Wait for DNS Propagation
DNS changes can take 24–48 hours to propagate.
Once propagated, Google Admin will detect the record.
Enable DKIM Signing
After propagation, click Start Authentication in the Admin console to enable DKIM signing for your domain.
Verify DKIM
Send a test email to another email account.
Check the email headers to ensure DKIM=pass.
For more information, refer to: https://support.google.com/a/answer/174126?hl=en&authuser=1&ref_topic=2752442