How do I set up DMARC for Google Workspace?
Add a TXT record named _dmarc at the company that runs your domain's DNS. Google Workspace has no DMARC setting of its own. Start the record at p=none with a report address, make sure SPF and DKIM pass for Google, then move the policy to quarantine and reject.
Last read from the sources at the foot of this page.
What does Google say about DMARC?
The record lives at your domain provider, not in the Google Admin console.
A DMARC record is a line of text that you add to your domain, following your domain provider's instructions.
You don't need to do anything in your Google Admin console to set up DMARC.
What record do I publish?
Use your own domain and a mailbox you read for the reports. Google recommends starting at none.
When you start using DMARC, we recommend setting the policy option (p) to none.
- Start herep=nonereports only
- p=quarantinesuspicious mail to spam
- Where to aimp=rejectforged mail refused
v=DMARC1; p=none; rua=mailto:[email protected]v=DMARC1; p=quarantine; rua=mailto:[email protected]v=DMARC1; p=reject; rua=mailto:[email protected]What are the steps?
- Check that SPF includes _spf.google.com and that DKIM is turned on for your domain in the Admin console.
- At your DNS host, add a TXT record named _dmarc with the first record below.
- Read the reports for a few cycles of your own mail and fix any service that fails.
- Change p=none to p=quarantine, then to p=reject.
Where is the change made?
Your DNS settings, at the company that holds your domain or runs its DNS. Google Workspace itself has no DMARC switch.
What else do people ask about this?
Does Google Workspace turn on DMARC by itself?
No. Google says nothing in the Admin console sets it up. The record is added at your domain provider.
What host name does Google use for the record?
Google gives the host as _dmarc followed by your domain. Many DNS hosts add the domain for you, so you type only _dmarc.
Where does this come from?
- Google Workspace Admin Help, Set up DMARCknowledge.workspace.google.comRead 16 October 2026
See what is open before anyone else does.
We read your domain from outside and show each way in with a check anyone can re-run.