SPF, DKIM, and DMARC

Setting Up SPF, DKIM, and DMARC in Google Workspace: Complete Guide for Businesses in Pakistan

Are your business emails landing in spam instead of your customer’s inbox? That’s where SPF, DKIM, and DMARC setup in Google Workspace comes in. These three email authentication protocols protect your brand, improve email deliverability, and stop scammers from pretending to be you.

Whether you’re running a startup in Karachi, a growing company in Lahore, or managing clients in Islamabad, this step-by-step guide will show you how to set up SPF, DKIM, and DMARC for Google Workspace—without the headache.

And the best part? gworkspacepartner.pk, through our sister company creativeON (an official Google Partner & Reseller in Pakistan), can help you set it up correctly the first time.

What Are SPF, DKIM, and DMARC? (Explained Simply)

Think of them as your business email’s security team:

  • SPF (Sender Policy Framework) – Works like a guest list. It tells mail servers which hosts are allowed to send emails for your domain.

  • DKIM (DomainKeys Identified Mail) – Adds a secret signature to your outgoing emails so the receiver knows they’re really from you.

  • DMARC (Domain-based Message Authentication, Reporting & Conformance) – Acts as the supervisor, checking both SPF and DKIM and deciding what happens to suspicious emails.

Why Email Authentication Matters in 2024 (and Beyond)

Since February 2024, Gmail and Yahoo made it mandatory for bulk senders (5,000+ emails daily) to have proper SPF, DKIM, and DMARC configured. But even if you send fewer, setting them up is critical for:

  • Preventing your emails from going to spam

  • Protecting your customers from phishing scams

  • Boosting your credibility with verified sender badges

  • Improving delivery rates (and ultimately your sales)

Step 1: How to Set Up SPF in Google Workspace

SPF is your email’s first line of defense. Here’s how to configure it:

  1. Log in to your domain provider (GoDaddy, Namecheap, Cloudflare, etc.).

  2. Open DNS settings → look for “DNS Management.”

  3. Check if you already have an SPF record (TXT starting with v=spf1).

    • If yes, add include:_spf.google.com before ~all.
      Example:
      v=spf1 a include:_spf.google.com ~all

    • If no, create a new TXT record:

      • Host/Name: @

      • Value: v=spf1 include:_spf.google.com ~all

Important: You can only have one SPF record per domain. If you use Mailchimp or other services, combine them into one record.

Step 2: How to Set Up DKIM in Google Workspace

DKIM ensures your emails carry a digital signature to prove authenticity.

  1. Log in to Google Admin Consoleadmin.google.com.

  2. Go to: Apps > Google Workspace > Gmail > Authenticate Email.

  3. Choose your domain and click Generate New Record.

  4. Select 2048-bit key for stronger security.

  5. Copy the generated hostname and value.

  6. Add them as a TXT record in your domain’s DNS.

  7. Return to Google Admin Console and click Start Authentication.

Note: DNS changes may take 15 minutes to 24 hours to propagate.

Step 3: How to Configure DMARC for Google Workspace

DMARC tells receiving servers what to do if an email fails SPF or DKIM checks.

Wait at least 48 hours after SPF and DKIM setup before adding DMARC.

Start with monitoring mode:

  • Host/Name: _dmarc

  • Value: v=DMARC1; p=none; rua=mailto:reports@yourdomain.com

Progress to stricter policies later:

  • Quarantine suspicious emails:
    v=DMARC1; p=quarantine; rua=mailto:reports@yourdomain.com

  • Reject fake emails completely:
    v=DMARC1; p=reject; rua=mailto:reports@yourdomain.com

How to Test Your SPF, DKIM, and DMARC Setup

  • SPF: Send a test email → check headers → look for SPF=PASS

  • DKIM: Email headers should show signed by yourdomain.com

  • DMARC: Wait for reports to be emailed to you

Tools you can use:

Quick Troubleshooting Tips

  • SPF not working? Check for typos, ensure only one SPF record, and allow time for DNS propagation.
  • DKIM failing? Verify TXT record, wait 24 hours, and confirm you clicked “Start Authentication.”
  • No DMARC reports? Double-check your rua email and check your spam folder.

Why Choose gworkspacepartner.pk (Powered by creativeON)?

When you set up Google Workspace with us, you get more than just a subscription:

  • Expert setup – We configure SPF, DKIM, and DMARC correctly the first time

  • Local support in Pakistan – Help in both English & Urdu

  • Affordable pricing – From just $3.80/month, lower than international rates

  • Migration assistance – Smooth transfer of your existing emails

  • 24/7 support – We’re always here for you

As an official Google Partner in Pakistan, creativeON ensures your Google Workspace is secure, compliant, and optimized for success.

Final Thoughts

Setting up SPF, DKIM, and DMARC in Google Workspace may seem technical, but it’s one of the most important steps for protecting your business emails. Start with SPF, add DKIM, then finish with DMARC. Once configured, you’ll notice better inbox placement, stronger security, and more trust from your customers.

Need help? Contact gworkspacepartner.pk today and let our certified team handle everything for you—so your business emails never land in spam again.

FAQs

 Yes. Even if you send fewer emails, these protocols protect your domain reputation and prevent spoofing.

 SPF usually works within minutes, DKIM can take 24 hours, and DMARC reports may take a few days.

You can set it up yourself, but a certified Google partner in Pakistan like creativeON ensures it’s done right without errors.

AF

Asher Feroze
Author | CreativeON Team
I’ve worked in various roles at CreativeON, including Manager Operations, Manager Marketing, and Level 2 Client Support. These days, I focus on helping people like you understand our products — whether it’s Domains, Dedicated Servers, VPS, Cloud Hosting, or Google Workspace — in simple, practical language.
Making Tech Simple for Businesses