Setting Up DKIM for Google Workspace (Step by Step)

If your business email runs on Google Workspace (Gmail with your own domain), turning on DKIM is one of the biggest things you can do for deliverability — it cryptographically proves your emails really come from your domain, so Gmail and Outlook stop treating them with suspicion.

Here's the good news: you only do one part. You generate the DKIM record in your Google Admin console and email it to us — AgentLoft adds it to your DNS for you. Then you flip it on. About 5 minutes of your time.

Step 1 — Generate the DKIM record in Google Admin

1. Go to admin.google.com and sign in with your Google Workspace admin account (a regular Gmail login won't have this).
2. From the menu, go to Apps → Google Workspace → Gmail.
3. Click Authenticate email.
4. Under Selected domain, make sure your sending domain is selected.
5. Click Generate new record. Keep the defaults (2048-bit key, prefix selector google) and click Generate.
6. Google shows you two values — this is your DKIM TXT record:
7. DNS Host name (TXT record name): google._domainkey
8. TXT record value: a long string starting with v=DKIM1; k=rsa; p=...

The DKIM screen in Google Admin — you can also find it by typing "dkim" in the admin search bar. Your record's value will appear where the dark box is.

Step 2 — Email the record to us

Copy both values (the host name and the full TXT value) and email them to support@agentloft.com. Easiest way: screenshot the screen Google shows you, or paste both values directly into the email.

We'll add the record to your domain's DNS and reply to confirm it's in place.

Tip: Keep the Google Admin tab open (or just come back to the same place later) — you'll need it for Step 3.

Step 3 — Turn it on

Once we've confirmed the record is added:

1. Go back to Google Admin: Apps → Google Workspace → Gmail → Authenticate email.
2. Click Start authentication.
3. If Google says it can't find the record, give it a little time and try again — DNS changes usually take minutes, but can take up to 48 hours.
4. When the status switches to "Authenticating email," you're done.

Verify it worked

Send an email from your domain to any Gmail address, open it, click the ⋮ menu → Show original, and confirm the summary shows DKIM: 'PASS'. You can also run your domain through Google's free MX/DKIM checker.

Official reference: Google's own guide is at Turn on DKIM for your domain.

Related articles

• Email Sending Domains & Deliverability
• Connecting Your Custom Domain (DNS Setup)

Need help? Email support@agentloft.com.