For customers using Google Workspace / Gmail
To improve email deliverability and prevent DMARC rejections, Google Workspace requires you to publish a special DNS record called a DKIM record. This allows Google to cryptographically sign your outgoing email so other mail systems know it is legitimate.
If you use Google Workspace, please follow the steps below.
Step 1 — Generate Your DKIM Key in Google Admin
-
Visit: https://admin.google.com
-
Go to:
Apps → Google Workspace → Gmail → Authenticate Email -
Choose your domain from the dropdown (example: yourdomain.org).
-
Click Generate New Record.
-
Use these settings:
-
Key length: 2048
-
Selector prefix: google (the default)
-
Google will display a long TXT value beginning with:
Keep this window open. You will need to copy that value.
Step 2 — Add the DKIM Record to Your DNS
If Orthodox Web Solutions manages your DNS, simply send us the TXT value and we will add it for you.
If you manage your own DNS (for example, through cPanel), add a new TXT record:
Name / Host:
TTL:
300 (or leave default)
Type:
TXT
Value:
Paste the long DKIM key that Google provided.
Make sure there are no extra spaces, quotes, or line breaks.
Step 3 — Activate DKIM in Google Admin
After the DNS record has had time to update (usually 5–20 minutes):
-
Return to:
Apps → Google Workspace → Gmail → Authenticate Email -
Click Start Authentication.
Google will now begin signing all outgoing email with DKIM.
Step 4 — Confirm DKIM Is Working
Send an email to a Gmail address.
Open the message → click the three dots → Show Original.
You should see:
If you do, everything is working correctly.
Need help?
If Orthodox Web Solutions manages your DNS, just send us the DKIM value Google gives you and we will add the record on your behalf.
We’re here to help make sure your email is delivered reliably.