On this page

Fixing DKIM in SiteGround for Google Workspace

What this fixes

DKIM lets receiving servers verify your mail hasn't been altered in transit and really came from you. See Fixing DKIM Record Issues for what it does and why it matters. For Google Workspace, the DKIM record is a TXT record — the key itself has to be generated in the Google Admin console first, then published to DNS.

This assumes your domain's DNS is managed through SiteGround's DNS Zone Editor (i.e. SiteGround's nameservers are set at your registrar).

Step 1: Generate the key in Google Workspace

  1. Go to Menu → Apps → Google Workspace → Gmail in the Admin console.
  2. Click Authenticate email, and select your domain.
  3. Click Generate New Record.
  4. Choose 2048-bit key length (recommended).
  5. Click Generate. Google shows you a TXT record name (default selector google, giving a host of google._domainkey) and a value (the public key).

Step 2: Publish it in SiteGround

  1. Log in to Site Tools.
  2. Go to Domain → DNS Zone Editor.
  3. Under Record Type, select TXT.
  4. Name: google._domainkey
  5. Value: paste the full value Google gave you.
  6. Click Create.

Step 3: Turn on DKIM signing

  1. Back in the Google Admin console, wait a few minutes for DNS to propagate.
  2. Return to Authenticate email for the domain and click Start Authentication.
  3. Re-run your scan to confirm.

Common pitfalls

  • Publishing the DNS record but forgetting to click Start Authentication in Google.
  • Truncated TXT values — make sure the whole key Google gave you was saved, not just part of it.