Setting up DKIM, DMARC, and SPF for Google Workspace with Plesk

This knowledgebase article will guide you through the process of setting up DomainKeys Identified Mail (DKIM), Domain-based Message Authentication, Reporting, and Conformance (DMARC), and Sender Policy Framework (SPF) records for your Google Workspace account using the Plesk control panel. Properly configuring these records will help improve email deliverability, protect your domain from spoofing and phishing attacks, and enhance your domain's reputation.

Prerequisites

1. A Plesk control panel hosting account.
2. An active Google Workspace subscription.
3. A custom domain added to your Google Workspace account.

Step 1: Gather Google Workspace DKIM, DMARC, and SPF Records Before making any changes in Plesk, you will need to obtain the necessary records from your Google Workspace account. Follow these Google Workspace support articles to retrieve the records for:

1. DKIM: https://support.google.com/a/answer/174124
2. DMARC: https://support.google.com/a/answer/2466563
3. SPF: https://support.google.com/a/answer/33786

Step 2: Log in to Plesk Log in to your Plesk control panel using your account credentials.

Step 3: Navigate to DNS Settings

1. In the Plesk control panel, click on "Websites & Domains" in the left sidebar.
2. Locate your custom domain and click on "DNS Settings" or "DNS" next to it.

Step 4: Add DKIM Record

1. Click on "Add Record" in the DNS settings page.
2. Choose "TXT" as the record type from the dropdown menu.
3. Enter the DKIM selector (usually "google") and "_domainkey" as subdomains in the "Domain name" field. For example: "google._domainkey".
4. Copy and paste the DKIM value provided by Google Workspace into the "TXT record" field.
5. Click "OK" or "Add" to save the record.

Step 5: Add DMARC Record

1. Click on "Add Record" in the DNS settings page.
2. Choose "TXT" as the record type from the dropdown menu.
3. Enter "_dmarc" in the "Domain name" field to indicate that this record applies to the root domain.
4. Copy and paste the DMARC value provided by Google Workspace into the "TXT record" field. For example: "v=DMARC1; p=none; rua=mailto:[email protected]".
5. Click "OK" or "Add" to save the record.

Step 6: Add or Update SPF Record

1. Check the list of DNS records for any existing SPF records. These records are identified by their "TXT" record type and start with "v=spf1".
2. If you already have an SPF record, click on the "Edit" button next to it. If not, click on "Add Record" and choose "TXT" as the record type.
3. Enter "@" in the "Domain name" field to indicate that this record applies to the root domain.
4. Copy and paste the SPF value provided by Google Workspace into the "TXT record" field. For example: "v=spf1 include:_spf.google.com ~all". If you are editing an existing SPF record, add "include:_spf.google.com" before the existing "~all" or "-all" mechanism.
5. Click "OK" or "Add" to save the record.

Step 7: Verify DNS Records

1. After adding or updating the DKIM, DMARC, and SPF records, click on "Update" or "Apply" to save your changes.
2. Allow some time (up to 48 hours) for the DNS changes to propagate across the internet.
3. Once the propagation is complete, you can verify your records using third-party tools like:
   • DKIM: https://mxtoolbox.com/dkim.aspx
   • DMARC: https://mxtoolbox.com/dmarc.aspx
   • SPF: https://mxtoolbox.com/spf.aspx

   Alternatively, you can use Google's own email deliverability tools (https://toolbox.googleapps.com/apps/checkmx/) to check the records.

Step 8: Finalize Google Workspace Setup After successfully configuring your DKIM, DMARC, and SPF records in Plesk, go back to your Google Workspace admin console to complete the email setup process. Follow the on-screen instructions to verify your domain and finalize your email configuration.

Conclusion

You have now successfully set up DKIM, DMARC, and SPF records for your Google Workspace account using the Plesk control panel. This will help improve email deliverability, protect your domain from spoofing and phishing attacks, and enhance your domain's reputation. Make sure to monitor your email delivery performance regularly and adjust the records as needed to maintain optimal email security and deliverability.