Set up SPF for Google Workspace
The exact steps in the Google Workspace admin console, followed by a checker to confirm the record resolves once you publish it.
Steps
- Publish a single TXT record at your root domain.
- Use v=spf1 include:_spf.google.com ~all as the starting value.
- Merge any other sending services into this one record rather than adding a second.
- Google has flattened _spf.google.com to plain IP ranges, so it currently costs a single DNS lookup rather than the four it cost when the record nested _netblocks includes. Budget the rest of your record against what the checker reports today, not against a remembered number.
Confirm it workedSPF checker
DNS changes take time to propagate. Check the record once you have published it.