Check my domain free
Check my domain free

Google Workspace and email impersonation protection

  • Home
  • Learn
  • Google Workspace and email impersonation protection

Google hosts your mail — but your domain's DNS records still protect your brand.

Two places to configure

Google Admin — DKIM signing, optional security settings.
DNS at your registrar — SPF, DKIM TXT record, DMARC policy.

Typical setup steps

  1. In Admin → Apps → Google Workspace → Gmail → Authenticate email — enable DKIM and add the TXT record Google provides
  2. Ensure SPF includes include:_spf.google.com
  3. Add DMARC at _dmarc.yourdomain.com

Check before you assume

Many Workspace domains run mail fine but leave DMARC missing. Run a free check on your domain — not google.com — to see your company's posture.

Frequently asked questions

Does Google set DMARC for me?

No. You or your admin must publish DMARC in DNS for your domain.

Related guides

What is DKIM?

Proof on your outgoing mail that it really came from you — so your customers can trust what they receive.

DMARC setup guide for business owners

You don't need to edit DNS yourself — here's what to ask for to protect your customers from fake mail.

Using Google Workspace? See if your domain is easy to impersonate

Google hosts your mail, but your domain's public records still need the right protections.

Check my Workspace domain