Skip to main content

Setting Up DKIM for Google Workspace

This document provides step-by-step instructions for setting up DKIM for Google Workspace.

Updated over a week ago

Before you start

  • You must be a Google Workspace super admin (or have the right Gmail admin privileges) to generate DKIM in the Admin console.

  • After turning on Gmail for your organization, Google notes you may need to wait 24–72 hours before DKIM record generation works.

Step 1: Generate the DKIM record in Google Admin Console

  1. Sign in to the Google Admin console.

  2. Go to Apps → Google Workspace → Gmail.

  3. Click Authenticate email.

  4. In Selected domain, choose the domain you’re setting up.

  5. Click Generate new record.

  6. Choose:

    • DKIM key bit length (Google recommends 2048-bit if supported)

    • Prefix selector (default is usually google; change it only if you already use that selector)

  7. Click Generate.

  8. Copy the values Google provides (you’ll use them in Cloud DNS):

    • TXT record name / host (example: google._domainkey)

    • TXT record value (starts with v=DKIM1; k=rsa; p=...)

Step 2: Add the DKIM TXT record to your DNS Settings.

Where you add the DKIM record depends on where your domain is registered and managed.
​
​✅ Option A: Your Domain is Registered with Zarla

If your domain was purchased through Zarla, you don’t need to access DNS yourself.

👉 Contact our Customer Success team at hello@zarla.com.

  • The DKIM host name (example: google._domainkey)

  • The full DKIM TXT value (starts with v=DKIM1; k=rsa; p=...)

Our team will add the record for you and confirm once it’s published.


​✅ Option B: Your Domain is Managed in Google Cloud (Cloud DNS) or purchased domain through Google.
​

If your domain’s DNS is managed in Google Cloud Platform (Cloud DNS):

  1. Log in to Google Cloud Console.

  2. Go to Network services → Cloud DNS.

  3. Select your Managed Zone.

  4. Click Add standard.

  5. Set:

    • Record type: TXT

    • DNS name: google._domainkey
      ​(Do not enter the full domain unless required by your zone setup.)

  6. Under TXT data, click + Add item.

  7. Paste the DKIM value in quotes:
    ​"v=DKIM1; k=rsa; p=..."

Click Save.
​
​✅ Option C: Your Domain is NOT Registered with Zarla or with Google Cloud.

If your domain was purchased through another provider (such as Google Domains, GoDaddy, Namecheap, Cloudflare, etc.), you’ll need to add the DKIM record in that provider’s DNS settings.
​
​Log in to your domain provider account.

  1. Go to DNS settings or Manage DNS.

  2. Add a new record:

    • Type: TXT

    • Host / Name: google._domainkey (or the selector Google provided)

    • Value: "v=DKIM1; k=rsa; p=..." (include quotes if required by the provider)

  3. Save the record.


Step 3: Turn on DKIM signing in Google Admin Console

  1. Go back to Admin console → Gmail → Authenticate email.

  2. Select the same domain.

  3. Click Start authentication.
    ​

Common mistakes to avoid

  • Looking for “DKIM” in the record type dropdown → It won’t exist. Use TXT.

  • Adding multiple DKIM records with the same selector (example: multiple google._domainkey TXT records) → keep only one per selector.

  • Putting the DKIM value at the root (@) → DKIM must be under selector._domainkey (like google._domainkey).

  • Skipping “+ Add item” in Cloud DNS TXT data → can cause formatting errors.

  • Starting authentication before publishing the TXT record → generate → publish DNS → then start authentication.
    ​
    If you require further assistance, we are committed to providing timely and effective assistance to all our customers. Below are our official support hours and how to contact us.
    ​
    Email support: Monday to Friday (9AM-5PM CST)
    Email us at hello@zarla.com

Related Articles
How to Manage or Update DNS Settings for Domains Purchased via domains.zarla.com
Did this answer your question?