Set up mail security and MX records for G Suite
Google Domains can automatically configure SPF Validation and DKIM signing for G Suite email accounts on your domain.
- In Google Domains, go to the the DNS tab for your domain.
- Scroll down to Synthetic Records.
- Locate the G Suite synthetic record and click Edit to the right of the entry.
- Leave Email checked.
Note: unchecking email will disable G Suite email for your domain.
- Click the triangle next to Email to select which email features to include:
- MX Records creates the Mail Exchange (MX) resource records in Google Domains to direct your domain's mail flow to your G Suite account. Leave this checked if you are going to use G Suite email. For more help see "MX records."
- SPF Validation creates a Sender Policy Framework (SPF) record for your domain. An SPF record is a type of Domain Name Service (DNS) record that identifies which mail servers are permitted to send email on behalf of your domain. The purpose of an SPF record is to prevent spammers from sending messages with forged From addresses at your domain. For more help see "SPF Records" or "About SPF records" in the G Suite help center.
- DKIM Signing creates the TXT records necessary to allow G Suite to attach a digital signature to outgoing emails to prevent spoofing of the From address. If you select DKIM Signing, you will need to configure DKIM in G Suite. For more help see "Add digital signatures with DKIM" in the G Suite help center.
- Click Save.
For more help with custom URLs, see the G Suite Help Center.