How do I set up DKIM at SiteGround for Google Workspace?
Generate the DKIM key in the Google Admin console, add it in your SiteGround DNS records as a TXT record named google._domainkey, then select Start authentication in the Admin console.
Last read , from the sources at the foot of this page.
What does DKIM do?
It adds a signature to each message your domain sends. A mail server checks the signature against a key published in your DNS, so a message changed or forged on the way fails.
Where does Google Workspace make the key?
In the Google Admin console, go to Apps, then Google Workspace, then Gmail, and open Authenticate email. Select your domain and generate a new record. Choose a 2048-bit key if your DNS host takes one, and 1024-bit if it does not. Keep the selector google. Do not select Start authentication yet.
google._domainkeyv=DKIM1;How do I add it at SiteGround?
- Sign in to SiteGround and open Site Tools for the site that uses your domain.
- Go to Domain, then DNS Zone Editor.
- In Create New Record, click the TXT tab.
- Type google._domainkey as the name of the record. Leave your domain name out: it is added for you.
- Paste the whole value Google shows as the record's value, exactly as copied.
- Click Create.
Your domain has to use SiteGround's name servers for these records to count.
In our words, from SiteGround: adding a TXT record, read 14 October 2026. If a screen has changed since, follow the host's own page.
How do I turn signing on?
Go back to Authenticate email in the Admin console and select Start authentication. The status changes to say that email is being authenticated with DKIM. If it does not, wait for your DNS change to be seen and try again.
Where does this come from?
- Google Workspace: Set up DKIMRead 14 October 2026
- SiteGround: adding a TXT recordRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/