How to Set Up DKIM for Gmail and Your Custom Domain (Step-by-Step Guide)
If you're serious about making sure your emails are trusted and land in the inbox (not spam), setting up DKIM (DomainKeys Identified Mail) is essential.
Here's exactly how to set up DKIM if you're using Gmail (Google Workspace) with your own custom domain:
Step 1: Log into Google Admin Console
Visit admin.google.com
Log in with your Google Workspace Admin account (not a regular Gmail address).
Step 2: Navigate to DKIM Settings
From the Admin Console homepage, go to:
Apps > Google Workspace > Gmail > Authenticate Email
You'll land on the DKIM settings page.
Step 3: Generate a New DKIM Record
Under "Selected domain," choose your domain (e.g., yourcompany.com).
Click Generate New Record.
Use these settings:
Key bit length: 2048 (recommended for stronger security)
Prefix selector: Leave as "google"
Click Generate.
Google will now show you:
A DNS Host Name (like
google._domainkey)A TXT Record Value (a long cryptographic key)
Step 4: Add the DKIM Record to Your Domain's DNS Settings
Go to wherever your domain's DNS is hosted (Squarespace, GoDaddy, Cloudflare, etc.).
Find the DNS management page.
Add a new TXT Record with the following:
Host/Name:
google._domainkeyType: TXT
Value: Paste the long key Google provided.
Save the changes.
Step 5: Start Authentication
Go back to the Google Admin Console DKIM page.
After a few minutes (up to an hour if needed), click Start Authentication.
If everything is set up correctly, DKIM will now be active!
How to Confirm DKIM is Working
Send yourself a test email from your business email to a Gmail address.
Open the email.
Click the three dots (
⋮) > Show Original.Look for:
DKIM: PASS
✅ If you see that, your domain is now signing emails with DKIM correctly!
Final Notes
DNS changes can sometimes take up to 48 hours to fully propagate, but usually it’s much faster.
If "Start Authentication" doesn't work right away, wait 15-30 minutes and try again.
Having DKIM, SPF, and (optionally) DMARC together gives you the highest level of email security and deliverability.
If you run into any problems, reach out — getting this done right is a small but crucial investment in your domain's professional reputation.
