Generate DKIM Records from your Admin Console

Generate DKIM Records from your Admin Console

Generate the DKIM for outgoing email

You must be signed in as a super administrator for this task.

  1. To continue, switch to a super administrator account. This (https://admin.google.com) will open the Google Admin console.

    Switch to the super administrator account (signs you out) or Learn more.

  2. From the Admin console Home page, go to Appsand thenGoogle Workspaceand thenGmail.
  3. Click Authenticate email.
  4. Your primary domain is selected by default. Click your primary domain name and select another domain where you’ll use DKIM.
  5. Click Generate new record and you’ll see these options:
    • Select DKIM key bit length—If your domain host supports 2048-bit keys, we recommend using them as they’re more secure. If you previously used a 1024-bit key, there's no impact when you switch to a 2048-bit key.

      If your domain host doesn't support 2048-bit keys, change the key length to 1024.

    • Prefix selector—Domain keys include a text string called the prefix selector which you can modify when you generate the key. The default prefix selector for the Gmail domain key is google. Change the prefix only if your domain already uses a DKIM key with the prefix selector google.
  6. Click Generate.

    Use the text at TXT record value to update the DNS record at your domain host. Remote mail servers retrieve this public key from the DNS record and use it to validate messages from your domain. You can also ask your Domain provider to add the Record in your DNS record.

​Important: If you recently set up Google Workspace or Gmail, you might see this error: "We are unable to process your request at this time. Please try again later. (Error #1000)."

After you turn on Gmail, you must wait 24–72 hours before you can generate a DKIM key.


    • Related Articles

    • Reset User Password from your Admin Console

      Reset a user's password If a user forgets the password for their managed Google account (for example, their Google Workspace or Cloud Identity account), or if you think their account has been compromised, you can reset their password from the Google ...

    • Add New User Account from your Admin Console

      Add a user account to your Admin console  Tip: Try the Home page quick link. On your Admin console Home page, click Add a user, and go to step 5 below. First switch to an administrator account. This will open the Google Admin Console. From the Admin ...

    • Restore a Recently Deleted User from your Admin Console

      Restore a recently deleted user You can restore a user account (including administrator accounts) up to 20 days after deleting it. After 20 days, the data is gone and Google Workspace support can’t restore it, either. See Delete a user from your ...

    • Restore a Suspended User from your Admin Console

      Restore a suspended user As an administrator for your organization's Google Workspace or Cloud Identity service, you can restore suspended user accounts that were: Suspended by you or another administrator to temporarily block their access. ...

    • Make a User an Admin

      Make someone else in your Google Workspace account an administrator to help you perform management tasks in your Google Admin console. This way, if you’re busy or on vacation, someone else can help with tasks like resetting passwords and adding or ...