Google Workspace SPF and DMARC for agencies
By Tyler Mayberry · Cirlet. Published . Page updated .
Based on the vendor’s public documentation, checked October 28, 2026. Vendor settings change; your provider should confirm what applies to your account before changing anything.
If Google Workspace is the only service that sends your agency’s mail, Google documents this SPF record: v=spf1 include:_spf.google.com ~all. Google says to turn on SPF and/or DKIM, wait 48 hours, then add a DMARC record that starts at p=none.
How agency domains compare
In our October 2026 check, 149 independent agency domains received mail through Google Workspace. 113 (76%) published one SPF record, 81 (54%) published no DMARC record and 24 (16%) asked receivers to quarantine or reject failing mail. 33 (22%) published no SPF record at all.
What Google documents
| SPF record | v=spf1 include:_spf.google.com ~all for domains that send only from Google Workspace. Google recommends ~all. |
|---|---|
| Limits | Each domain must have its own SPF record. An SPF record can have up to 10 include: tags. |
| Before DMARC | Turn on SPF and/or DKIM, then allow 48 hours before setting up DMARC. |
| DMARC record | A TXT record at _dmarc.yourdomain. Google’s example: v=DMARC1; p=none; rua=mailto:postmaster@example.com, mailto:dmarc@example.com; pct=100; adkim=s; aspf=s. |
| Rollout | Start with p=none, include pct while rolling out, and move toward quarantine or reject over time. |
| Admin console | No Google Admin console change is needed for DMARC; the record lives at your DNS host. |
List every service that sends as your domain.
Your agency management system, rater, e-signature tool, newsletter service, payment or billing system and phone system may all send mail that says it is from your domain. Each one needs to be covered by SPF or sign with DKIM for your domain before DMARC moves past monitoring. Ask your provider for that list, with an owner for each sender.
Google Workspace questions
What SPF record does an agency on Google Workspace need?
If Google Workspace is the only sender, Google documents v=spf1 include:_spf.google.com ~all. Add other senders to the same record rather than publishing a second one.
How long should an agency wait before adding DMARC?
Google says to allow 48 hours after setting up SPF and/or DKIM before setting up DMARC.
How many agency domains on Google Workspace publish no DMARC record?
81 of 149 (54%) in our October 2026 check of independent agency domains.