How to Set Up DNS for Email with Google Workspace or Microsoft 365

Google Workspace DNS Records

MX Records

SPF Record

v=spf1 include:_spf.google.com ~all

DKIM

Generate in Google Admin Console → Apps → Google Workspace → Gmail → Authenticate email. Add the provided TXT record.

DMARC

_dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

Microsoft 365 DNS Records

MX Record

example.com. MX 0 example-com.mail.protection.outlook.com.

SPF Record

v=spf1 include:spf.protection.outlook.com -all

Autodiscover

autodiscover.example.com. CNAME autodiscover.outlook.com.

Verification

# Check MX records
dig example.com MX +short

# Check SPF
dig example.com TXT +short | grep spf

# Send test email and check headers
# Look for: spf=pass, dkim=pass, dmarc=pass

Combining with VPS Email

If your VPS also sends email (notifications, alerts), ensure your SPF record includes both:

v=spf1 include:_spf.google.com ip4:YOUR_VPS_IP -all