Google Workspace email setup check
Type your domain. We read the records Google Workspace asks for and tell you which are right, which are missing, and exactly what to add.
What you get
- MX: whether mail is delivered to Google, and whether old mail servers are still listed.
- SPF: whether it includes _spf.google.com and rejects other senders.
- DKIM: whether the google._domainkey key is published, so mail is signed as your domain.
- DMARC: whether spoofed email is stopped or only reported.
- A link to the free generator for anything missing, with your domain filled in.
Common questions
Where do I turn on DKIM for Google Workspace?
In the Google Admin console: Apps, Google Workspace, Gmail, Authenticate email. Generate the key, add the TXT record it shows at google._domainkey, then press Start authentication.
Which MX record does Google want?
New setups use one record, smtp.google.com. Older ones list aspmx.l.google.com and alternates; both are Google and both work.
Why does email still go to junk?
Usually because DKIM is off or DMARC is missing. Google and Yahoo ask bulk senders for SPF, DKIM and DMARC; this check shows which one is missing.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.