{"id":86610,"date":"2026-08-04T09:24:17","date_gmt":"2026-08-04T02:24:17","guid":{"rendered":"https:\/\/itsystems.vn\/configure-spf-dkim-dmarc-for-business-gmail\/"},"modified":"2026-08-04T09:24:17","modified_gmt":"2026-08-04T02:24:17","slug":"configure-spf-dkim-dmarc-for-business-gmail","status":"publish","type":"post","link":"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/","title":{"rendered":"How to Configure SPF, DKIM and DMARC for Business Gmail"},"content":{"rendered":"<p>How to Configure SPF, DKIM and DMARC for Business Gmail is a practical guide for SMEs that need a reliable, maintainable technology setup rather than a one-time configuration. The article explains what to check, what can go wrong, how to decide, and how to verify the result after implementation.<\/p>\n<p>If your company needs implementation support, you can review <a href=\"https:\/\/itsystems.vn\/mail-google-apps-free-mien-phi\/\">configure SPF DKIM DMARC for business Gmail<\/a> with IT Systems and clarify scope, responsibilities and handover documents before starting.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">The content of the article<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Why_Business_Gmail_Needs_SPF_DKIM_and_DMARC\" >Why Business Gmail Needs SPF, DKIM and DMARC<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#What_SPF_Does_and_How_to_Configure_It\" >What SPF Does and How to Configure It<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#How_DKIM_Protects_Email_Integrity\" >How DKIM Protects Email Integrity<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Why_DMARC_Should_Start_in_Monitoring_Mode\" >Why DMARC Should Start in Monitoring Mode<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Post-Configuration_Testing_Checklist\" >Post-Configuration Testing Checklist<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Common_Reasons_Email_Still_Goes_to_Spam\" >Common Reasons Email Still Goes to Spam<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#When_to_Ask_for_Technical_Support\" >When to Ask for Technical Support<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Need_help_implementing_this_properly\" >Need help implementing this properly?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/itsystems.vn\/en\/configure-spf-dkim-dmarc-for-business-gmail\/#Final_Recommendation\" >Final Recommendation<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Why_Business_Gmail_Needs_SPF_DKIM_and_DMARC\"><\/span>Why Business Gmail Needs SPF, DKIM and DMARC<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>When a company uses Gmail with its own domain, successful email delivery is not only about sending and receiving messages. The domain also needs to prove that outgoing emails are legitimate. SPF, DKIM and DMARC work together to reduce spoofing, protect domain reputation and improve inbox placement. Without these records, quotations, invoices or customer confirmations may land in spam or be rejected by the recipient server. For SMEs, this should be treated as a baseline configuration before adding CRM, email marketing or website email sending.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_SPF_Does_and_How_to_Configure_It\"><\/span>What SPF Does and How to Configure It<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SPF is a DNS TXT record that lists which systems are allowed to send email on behalf of your domain. For Google Workspace, the SPF record normally includes Google as an authorized sender, but the business also needs to account for CRM, invoicing systems, email marketing tools and website forms. Common mistakes include creating multiple SPF records, exceeding DNS lookup limits or missing a valid sender. The safest approach is to maintain one clean SPF record, validate its syntax and test every real sending source.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_DKIM_Protects_Email_Integrity\"><\/span>How DKIM Protects Email Integrity<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>DKIM signs outgoing email with a cryptographic key so receiving servers can verify that the message was not altered and came from an authorized system. For business Gmail, the admin creates a DKIM key in Google Workspace, adds the TXT record to DNS and then enables authentication. DKIM is especially important for commercial email such as quotations, contracts and invoices because it gives spam filters and recipients an additional trust signal.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Why_DMARC_Should_Start_in_Monitoring_Mode\"><\/span>Why DMARC Should Start in Monitoring Mode<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>DMARC tells receiving servers what to do when email fails SPF or DKIM alignment. It is risky to start with a reject policy before the company understands all legitimate sending sources. A safer rollout starts with p=none to collect reports, then moves to quarantine and finally reject after unknown sources are reviewed. This staged approach reduces the chance of blocking real email from CRM, websites or accounting tools.<\/p>\n<table>\n<thead>\n<tr>\n<th>Area<\/th>\n<th>What to Check<\/th>\n<th>Why It Matters<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Access<\/td>\n<td>Admin accounts, DNS, hosting or cloud console<\/td>\n<td>Prevents delays during implementation<\/td>\n<\/tr>\n<tr>\n<td>Risk<\/td>\n<td>Downtime, data loss, spam, security exposure<\/td>\n<td>Helps prioritize work<\/td>\n<\/tr>\n<tr>\n<td>Verification<\/td>\n<td>Test results, screenshots, reports and handover<\/td>\n<td>Makes the project measurable<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><span class=\"ez-toc-section\" id=\"Post-Configuration_Testing_Checklist\"><\/span>Post-Configuration Testing Checklist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>After DNS records are added, test email from Gmail web, Outlook, mobile devices, website forms, CRM and any invoicing tool that sends on behalf of the company domain. Each source should be checked for SPF pass, DKIM pass and DMARC alignment. The test results should be documented with the sending source, result, owner and date. This turns email authentication into an operational checklist rather than a one-time technical change.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Common_Reasons_Email_Still_Goes_to_Spam\"><\/span>Common Reasons Email Still Goes to Spam<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Email can still land in spam even when SPF, DKIM and DMARC exist. The domain may be new, the email content may contain risky links, sending volume may increase too quickly, SPF alignment may fail or DKIM may be enabled for the wrong selector. Another common issue is a website sending mail through a separate SMTP service that was never added to SPF. DNS configuration is the foundation, but content, volume and sender reputation still matter.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"When_to_Ask_for_Technical_Support\"><\/span>When to Ask for Technical Support<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>If the company is unsure who controls DNS, uses several email-sending systems or has already seen deliverability issues, it is better to review the full setup before making policy changes. IT Systems can help audit DNS, configure SPF, DKIM and DMARC, test deliverability and hand over a clear checklist as part of Google Workspace support for businesses.<\/p>\n<div class=\"its-article-cta\" style=\"border:1px solid #ef233c;border-left:6px solid #ef233c;background:#fff7f7;padding:22px 24px;margin:30px 0;border-radius:10px\">\n<h2 style=\"margin-top:0\"><span class=\"ez-toc-section\" id=\"Need_help_implementing_this_properly\"><\/span>Need help implementing this properly?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>IT Systems can review your current setup, prepare a practical checklist, implement the technical changes and hand over clear documentation for your team.<\/p>\n<p><a href=\"https:\/\/itsystems.vn\/mail-google-apps-free-mien-phi\/\" style=\"display:inline-block;background:#ef233c;color:#ffffff;text-decoration:none;padding:12px 18px;border-radius:6px;font-weight:700\">Talk to IT Systems<\/a><\/p>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Final_Recommendation\"><\/span>Final Recommendation<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Do not treat this as a purely technical task. The best result comes from combining the right configuration with ownership, documentation, testing and a simple process for future changes. That is what makes the solution sustainable after the initial setup is complete.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A practical checklist for configuring SPF, DKIM and DMARC for business Gmail, improving deliverability and reducing domain spoofing risk.<\/p>\n","protected":false},"author":34,"featured_media":86580,"comment_status":"","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_focus_keyword":"configure SPF DKIM DMARC for business Gmail","rank_math_title":"","rank_math_description":"","rank_math_robots":"","rank_math_canonical_url":"","rank_math_schema":"","footnotes":""},"categories":[2039],"tags":[],"class_list":["post-86610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dich-vu-it"],"wpml_current_locale":"en_US","wpml_translations":[],"_links":{"self":[{"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/posts\/86610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/comments?post=86610"}],"version-history":[{"count":0,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/posts\/86610\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/media\/86580"}],"wp:attachment":[{"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/media?parent=86610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/categories?post=86610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itsystems.vn\/en\/wp-json\/wp\/v2\/tags?post=86610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}