Google Workspace emails going to spam

Watch the steps

1. 1Apps
2. 2Authenticate email
3. 3Selected domain
4. 4Generate new record
5. 5Generate
6. 6Add this TXT record to your domain's DNS
7. ✓Done

Turn on DKIM for Gmail (0:24)

To keep your emails out of spam, turn on DKIM signing in the Google Admin console and make sure your domain has SPF and DMARC records.

SPF, DKIM & DMARC in plain words

These three DNS records tell other mail servers that your emails are really from you.

• SPF lists the servers allowed to send email for your domain. For Google Workspace it contains include:_spf.google.com. A domain should have only one SPF record.
• DKIM adds a digital signature so receivers can tell an email was not faked.
• DMARC tells receivers what to do with emails that fail SPF or DKIM. It is a TXT record at _dmarc.yourdomain.com. Add it about 48 hours after SPF and DKIM are on.

Turn on DKIM

You need a Google Workspace admin account, and access to your domain’s DNS to add the record.

1. Sign in to admin.google.com as an admin.

2. Go to Apps → Google Workspace → Gmail.

   

3. Click Authenticate email and pick your domain under Selected domain.

   

4. Click Generate New Record. Keep the default settings (2048 bits and the prefix google), then click Generate. If the box says you must wait 24 to 72 hours after enabling Gmail, come back and try again after that.

   

   

5. Add the TXT record shown to your domain’s DNS.

6. Come back and click Start authentication. The status should change to Authenticating email with DKIM. This can take up to 48 hours.

   

To check your MX and SPF records, enter your domain in Google’s Check MX tool. Or send us your domain and we will check all three records.

Everyday causes

Even with SPF, DKIM and DMARC in place, the way you send can still land mail in spam.

• Sending bulk or marketing email from a personal staff mailbox.
• Links that do not say where they go, or text hidden with formatting.
• An unclear sender name. Use a real name, and a shared group address for team mail.
• Misleading subjects such as “Re:” when it is not a reply.

If emails are not arriving at all, see Gmail not receiving emails.

Still stuck

WhatsApp our support team at +60 16-916 3324.

Common issues

We added the DKIM record but the Admin console still says we must update DNS. Is it broken?

Not always. Google says DKIM can take up to 48 hours to start working, and the warning may stay for that long. If it is still there after 48 hours, send us your domain name and we will check the record.

Can we send our newsletter to 500 customers from our Gmail?

It is better not to. Sending in bulk from one staff mailbox is a common reason for landing in spam. Use a proper email marketing service, and keep Gmail for one-to-one emails.

Do we need all three: SPF, DKIM and DMARC?

Yes, set up all three. SPF and DKIM prove your emails are really from you, and DMARC tells receivers what to do when a check fails. Set up SPF and DKIM first, wait about 48 hours, then add DMARC.

Related articles

• Emails not arriving in Gmail - quick checks
• Create a shared inbox like info@ in Google Workspace
• Rename a Google Workspace user or add an email alias