How to set up DKIM on Google Workspace

Step by step DKIM setup for Google Workspace: complete instructions, examples, verification commands, and common pitfalls.

Want to check your domain while following this guide?

Run a free SPF, DKIM and DMARC check on your domain to see exactly what is passing and what needs fixing.

No signup required. Works on any domain.

search Run a Free Domain Check notifications_active Monitor my domain

This is a reference guide for configuring DKIM on Google Workspace. Use it while editing DNS or when troubleshooting deliverability.

Tip: Avoid common mistakes: follow these steps to add DKIM on Google Workspace. Then verify everything with the InboxGreen Free Checker.

Provider-specific notes for Google Workspace

  • Google Workspace SPF is usually just one include. Problems show up when people add a second SPF TXT record instead of editing the existing one.
  • DKIM signing must be enabled in the Admin console - publishing the DNS record alone is not enough. Go to Apps → Google Workspace → Gmail → Authenticate email.
  • Admin console → Apps → Google Workspace → Gmail → Authenticate email (DKIM and SPF).

What you’ll need

  • Access to Google Workspace to generate a DKIM key and selector.
  • DNS provider access to publish a TXT record at selector._domainkey.

Generate your DKIM key

In Google Workspace, generate a DKIM key and note the selector. Providers often suggest something like google (or google._domainkey).

Admin console → Apps → Google Workspace → Gmail → Authenticate email (DKIM and SPF).

Publish the record

  1. Create a TXT record at host selector._domainkey (replace selector with your actual selector name).
  2. Paste the full value starting with v=DKIM1; k=rsa; p= and save.
  3. Wait for DNS propagation.

Verify DKIM

  • Send a test email to a Gmail address and use “Show original” to confirm “DKIM: PASS”.
  • Or run: 
    dig TXT selector._domainkey.yourdomain.com +short

Common mistakes

  • Using the wrong host so the record becomes selector._domainkey.yourdomain.com.yourdomain.com.
  • Breaking the value by wrapping or truncating the TXT string.
  • Publishing a record for the wrong selector and then validating on another.

Related for Google Workspace

quick_reference_all Set up SPF on Google Workspace quick_reference_all Set up DMARC on Google Workspace quick_reference_all Set up List-Unsubscribe on Google Workspace
Pro tip: Turn on InboxGreen Monitoring to check these records daily and get alerts if something breaks.

Free Deliverability Scan

Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.

Useful tools

tune SPF Generator tune DMARC Generator verified Badges