SPF Setup for Google Workspace (G Suite)

December 5, 2025 • InboxGreenEmail Team

🚨 DKIM issues can silently kill replies.

If opens dropped, replies disappeared, or bounces increased, treat it as an incident. Run the scan and get a fix path.

No signup required. Works on any domain.

search Run a Free Domain Check notifications_active Monitor my domain

SPF Setup for Google Workspace (G Suite)

As a SaaS founder or marketer, you know that getting your emails into the inbox is critical. But how do you ensure that your emails land where they should? One of the first steps in achieving good inbox placement is setting up SPF, or Sender Policy Framework. If you’re using Google Workspace, this guide will walk you through the process and help you avoid common pitfalls.

Understanding the Problem

When you send an email, the receiving server checks if the email is coming from an authorized sender. If it’s not, your email may end up in the spam folder or be rejected outright. This is where SPF comes in. It allows you to specify which mail servers are allowed to send emails on behalf of your domain.

Without SPF, you risk damaging your sender reputation. This can lead to low deliverability rates, which means fewer people see your messages. To put it simply, if you want your emails to be trusted, you need to set up SPF.

Step-by-Step SPF Setup

1. Access Your Domain's DNS Settings

First, you need to log in to your domain registrar or DNS hosting provider. This is where you will add the SPF record. If you are unsure who your provider is, you can use a tool like InboxGreen checker to find out.

2. Create the SPF Record

Your SPF record is a simple text entry in your DNS settings. For Google Workspace, the basic SPF record looks like this:

v=spf1 include:_spf.google.com ~all

This record does a couple of things:

  • v=spf1: This indicates that this is an SPF record.
  • include:_spf.google.com: This allows Google’s servers to send emails on behalf of your domain.
  • ~all: This is a soft fail directive, meaning emails from servers not listed will be marked but not outright rejected.

3. Add the SPF Record to Your DNS

Now that you have your SPF record, go back to your DNS settings. Look for an option to add a new TXT record. Here’s what you need to fill out:

  • Type: TXT
  • Name: @ (or your domain name)
  • Value: v=spf1 include:_spf.google.com ~all
  • TTL: 3600 (or default)

Save your changes. It may take some time for the new record to propagate. You can check the status using the InboxGreen checker.

4. Verify Your SPF Record

Once you’ve added the SPF record, it’s crucial to verify that it’s set up correctly. Use a tool like the InboxGreen checker to ensure your SPF record is valid. Look for messages indicating whether the record is found and correctly formatted.

Common Gotchas

Setting up SPF is usually straightforward, but there are some common issues to watch out for:

  • Multiple SPF Records: You can only have one SPF record per domain. If you have multiple records, they will conflict, and your emails may be rejected.
  • Record Length: SPF records should not exceed 255 characters. If your record is too long, consider using the SPF generator to help you streamline it.
  • Soft Fail vs. Hard Fail: Using ~all (soft fail) is safer for testing, but consider changing it to -all (hard fail) once you are confident in your setup.

Enhancing Your Email Authentication

SPF is just one part of the email authentication trio. You should also implement DKIM and DMARC for better protection and deliverability. DKIM adds a digital signature to your emails, while DMARC helps you manage your SPF and DKIM policies.

Setting up DKIM in Google Workspace is straightforward. Go to your Google Admin console, navigate to Apps, then Google Workspace, and select Gmail. From there, you can find the DKIM settings. Generate the key, and add it as a TXT record in your DNS.

For DMARC, your record might look like this:

v=DMARC1; p=none; rua=mailto:[email protected]

This record tells receiving servers what to do with emails that fail SPF or DKIM checks. Start with "p=none" to monitor before enforcing stricter policies.

5. Use InboxGreen Tools

To streamline your email authentication process, consider using the DMARC generator available at InboxGreen. It simplifies the creation of your DMARC record, ensuring you get it right the first time.

What to Do Next

Now that you have a solid understanding of SPF setup for Google Workspace, it’s time to take action. Start by checking your current SPF record with the InboxGreen checker. If you don’t have one, create it using the steps outlined above.

Once you’ve set up SPF, don’t stop there. Implement DKIM and DMARC to further protect your domain. Use the tools available on InboxGreen to make this process easier.

Remember, email deliverability is an ongoing process. Regularly monitor your records and adjust as necessary. With the right setup, you’ll improve your chances of landing in the inbox, not the spam folder.

For more information on our services, check out our pricing page and see how InboxGreen can help you optimize your email deliverability.

Free Deliverability Scan

Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.