--- title: "Guide to DMARC setup for Google Workspace | DuoCircle" description: "Guide to DMARC setup for Google Workspace." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/" --- Quick Answer Setting up DMARC for Google Workspace takes three steps. First, generate a DMARC record with any DMARC record generator: provide your domain, the policy (none, quarantine, or reject), and a reporting email address; the tool returns a TXT record value. Second, publish it in DNS as a TXT record at \`\_dmarc.yourdomain.com\` with the generated value, save, and wait for DNS propagation. Third, choose your policy and progress through the three levels. None (monitoring) delivers all mail and sends you reports showing pass/fail across senders; start here to discover all your sending sources. Quarantine sends failing mail to the spam/junk folder; use it once you understand your email flow. Reject blocks failing mail outright; use it after you have fixed alignment for every legitimate sender. Move from none to quarantine to reject as you confirm the reports look clean. Guide to DMARC setup for Google Workspace Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2025/12/Guide-to-DMARC-setup-for-Google-Workspace.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdmarc%2Fguide-to-dmarc-setup-for-google-workspace%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Guide%20to%20DMARC%20setup%20for%20Google%20Workspace&url=undefined%2Fblog%2Fdmarc%2Fguide-to-dmarc-setup-for-google-workspace%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdmarc%2Fguide-to-dmarc-setup-for-google-workspace%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdmarc%2Fguide-to-dmarc-setup-for-google-workspace%2F&title=Guide%20to%20DMARC%20setup%20for%20Google%20Workspace "Share on Reddit") [ ](mailto:?subject=Guide%20to%20DMARC%20setup%20for%20Google%20Workspace&body=Check out this article: undefined%2Fblog%2Fdmarc%2Fguide-to-dmarc-setup-for-google-workspace%2F "Share via Email") ![DMARC setup for Google Workspace](https://media.mailhop.org/duocircle/images/2025/12/spf-record-4502.jpg) **Google Workspace** helps businesses send emails every day, but keeping those emails safe is just as important as sending them. Gmail now strongly encourages domains to use DMARC, which tells mail servers how to treat [suspicious messages](https://www.consumeraffairs.com/news/us-flooded-with-scam-texts-that-funnel-stolen-card-data-to-overseas-criminal-rings-101725.html). If you set it up correctly, your emails are more likely to reach inboxes and your brand stays protected. When you enable **DMARC for your Google Workspace**, you get a way to instruct receiving servers what to do with emails that fail the DMARC checks. You can tell them to place such emails in the spam folder or reject them altogether, preventing [email-based phishing incidents](https://www.trendmicro.com/vinfo/us/security/news/threat-landscape/email-threat-landscape-report-evolving-threats-in-email-based-attacks). This **short guide will show you** how to publish a [DMARC record](/resources/dmarc-records) for Google Workspace and check that it is working properly. ## How to Create a DMARC Record You can make your DMARC record using any online [DMARC record generator](/resources/check-dmarc-records/dmarc-record-generator). It will ask for your domain name, the policy you want (monitor, quarantine, or reject), and an **email address for reports**. The tool will then give you a ready TXT record. Once your DMARC record is created, copy the result so you can **add it to your DNS**. [![DNS ](https://media.mailhop.org/duocircle/images/2025/12/spf-record-9921.jpg)](https://media.mailhop.org/duocircle/images/2025/12/spf-record-9921.jpg) ## How to Add DMARC in DNS To enable DMARC in Google Workspace, you need to publish the record in your DNS. Follow these steps: - Log in to your DNS provider - Create a new [TXT record](https://www.digicert.com/faq/dns/what-is-a-txt-record) - Use this name: \_**dmarc.yourdomain.com** - Paste the DMARC value - Save it and wait for DNS to update After you publish it, mail servers will start applying your policy to suspicious emails. You will also receive reports that show how your domain is used and whether your **messages pass authentication**. ## DMARC policy options **DMARC has three policies** that decide what happens when an email fails authentication. ### None (Monitoring Mode) _This is the beginner policy. When you choose “none,” you are only watching what is happening_. Emails that fail DMARC are still delivered, but you get reports showing which ones passed and which ones failed. This is great for getting visibility without blocking anything. Most domain owners start here so they can **understand their email sources**. [![None (Monitoring Mode), DMARC Policy](https://media.mailhop.org/duocircle/images/2025/12/spf-record-check-0023.jpg)](https://media.mailhop.org/duocircle/images/2025/12/spf-record-check-0023.jpg) ### Quarantine This is the middle policy. When you switch to “quarantine,” mail servers will treat failed emails as suspicious. Instead of landing in the inbox, they may go to the [spam or junk folder](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/). This protects users because risky messages do not reach them directly. **Quarantine is helpful** when you already understand your email flow and want to add some level of control. [![emails as suspicious ](https://media.mailhop.org/duocircle/images/2025/12/spf-record-check-9921.jpg)](https://media.mailhop.org/duocircle/images/2025/12/spf-record-check-9921.jpg) ### Reject This is the strictest policy. When you choose “reject,” emails that fail DMARC are completely blocked. They never reach the inbox or spam folder. This gives your domain the strongest protection against [spoofing and abuse](https://www.bleepingcomputer.com/news/security/google-sues-to-dismantle-chinese-phishing-platform-behind-us-toll-scams/). Most businesses move to “reject” only after fixing alignment issues and making sure only authorized **systems send emails**. In short, DMARC strengthens your [email security](/) by starting with monitoring, then moving to warning, and finally full blocking. You begin with “none,” shift to “quarantine,” and reach “reject.” _This gradual approach keeps your email safe without breaking your delivery. DMARC is most powerful when you increase policies step by step while watching your reports_. ## Topics DMARCemail securitySecurity ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ DMARC 6m Avoiding common BIMI pitfalls: What goes wrong and how to fix it Jun 24, 2025 ](/blog/dmarc/avoiding-bimi-pitfalls-common-errors-and-how-to-fix-them/)[ DMARC 3m Can threat actors bypass DMARC? Feb 21, 2025 ](/blog/dmarc/can-threat-actors-bypass-dmarc/)[ DMARC 7m Cloudflare’s new SPF, DKIM, and DMARC requirements Jul 18, 2025 ](/blog/dmarc/cloudflares-new-spf-dkim-and-dmarc-requirements/)[ DMARC 6m Deploying DMARC the right way: Here’s what MSPs and enterprises should know Feb 26, 2026 ](/blog/dmarc/deploying-dmarc-correctly-what-msps-and-enterprises-must-know/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Guide to DMARC setup for Google Workspace","description":"Guide to DMARC setup for Google Workspace.","url":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/","datePublished":"2025-12-05T19:11:03.000Z","dateModified":"2025-12-05T19:44:36.000Z","dateCreated":"2025-12-05T19:11:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/"},"articleSection":"dmarc","keywords":"DMARC, email security, Security","wordCount":530,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/12/spf-record-4502.jpg","caption":"DMARC setup for Google Workspace","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"DMARC"},{"@type":"ListItem","position":3,"name":"Guide to DMARC setup for Google Workspace","item":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"DMARC","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Guide to DMARC setup for Google Workspace","item":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Guide to DMARC setup for Google Workspace","description":"Guide to DMARC setup for Google Workspace.","url":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/","datePublished":"2025-12-05T19:11:03.000Z","dateModified":"2025-12-05T19:44:36.000Z","dateCreated":"2025-12-05T19:11:03.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/guide-to-dmarc-setup-for-google-workspace/"},"articleSection":"dmarc","keywords":"DMARC, email security, Security","wordCount":530,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2025/12/spf-record-4502.jpg","caption":"DMARC setup for Google Workspace","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```