Setting up email for my business, do I need SPF, DKIM, and DMARC?

Question

I'm finally setting up proper email for my small business domain instead of using a Gmail alias. I've been reading about deliverability and all these acronyms keep coming up. I've already configured an SPF record v=spf1 include:_spf.google.com ~all because I'm using Google Workspace. But now I'm seeing DKIM and DMARC mentioned everywhere too. Do I actually need to set up all three of these things, or is SPF enough to get my emails into people's inboxes and not spam? I'm a bit overwhelmed by the DNS settings.

admin · Accepted Answer

Yes, you absolutely need to set up all three: SPF, DKIM, and DMARC. SPF alone is no longer sufficient for optimal deliverability. SPF authorizes your mail server, DKIM cryptographically signs your emails to prove they weren't tampered with, and DMARC tells receiving servers what to do if an email fails both SPF and DKIM checks. Together, they form a layered defense against spoofing and phishing, which major inbox providers like Gmail and Outlook now require to establish domain reputation and trust. Without all three, your legitimate business emails are far more likely to be flagged as spam or even rejected.

For Google Workspace, you must generate a DKIM key in your admin console and add it as a TXT record. Your record will look similar to this:
google._domainkey IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA..."

After enabling DKIM, create a DMARC policy TXT record at `_dmarc.yourdomain.com` to start receiving aggregate reports and instruct servers to quarantine or reject failing messages:
_dmarc IN TXT "v=DMARC1; p=none; rua=mailto:admin@yourdomain.com;"

Setting up email for my business, do I need SPF, DKIM, and DMARC?

Who Is Online