← All articles

Email Deliverability

Add DNS records with Google Workspace

Where to actually add records when your email is Google Workspace — it’s not in the Admin console.

The Google Admin console does NOT host your DNS — it only tells you which records to add. You add them wherever your domain’s nameservers point (GoDaddy, Squarespace, Cloudflare, etc.). If your domain used to be at Google Domains, that’s now Squarespace.

What goes where

  • Google’s own DKIM (the "google._domainkey" record) signs mail you send from Gmail — generate it under Admin console → Apps → Google Workspace → Gmail → Authenticate email.
  • Focal’s records (its own DKIM selector, SPF include, DMARC) are separate and go at your DNS host. Both DKIM selectors coexist — they don’t conflict.

SPF with Google + Focal

You get one SPF record. If Google Workspace is already set up, merge Focal’s include into the existing record rather than adding a second:

v=spf1 include:_spf.google.com include:<focal-send-host> ~all

Then follow the specific guide for your DNS host (below) to actually enter the records.

Related articles