...

What Spoofing Is and How to Add Protection From It to Google Workspace (DMARC Record)

Quick and easy-to-follow guide for Google Workspace administrators

How to know if you are getting spoofed

You are getting spoofed if you:

  • Get bounce messages for emails that seem to be coming from your account.
  • Get a reply to a message you never sent.
  • Are told by people that they’re getting spam from you, but you haven’t sent them emails.
  • See an email in Spam that replaces your email address with “me.”

What is spoofing

  • To spoof is to send emails from a fake sending email address. You make the From email look as if it’s sent by someone else.
  • The idea is to trick people into thinking an email is coming from someone they trust, but it’s actually sent with malicious intent, like obtaining sensitive information or hacking someone’s account.
  • For example, someone may know that you’re going to email your client a payment request. Then they send a fake email to your customer, pretending to be coming from you, getting your customer to send the payment their way instead.

How to prevent spoofing with Google Workspace using DMARC

  • You can prevent spoofing of your domain thanks to DMARC (Domain-based Message Authentication Reporting & Conformance).
  • DMARC allows you to choose what to do once an SPF or DKIM check has failed. 
  • SPF/DKIM checks are automatically performed on all sent mail from your domain. 
  • Spoofers can’t fake SPF and DKIM, so when the check fails, you’re usually dealing with spoofing.
  • Through DMARC, you get to say what happens to the spoofed message.
  • After adding a DMARC record, you periodically receive reports about messages that have passed and failed the DMARC policy checks.

Steps you must take before setting up DMARC

How to set up DMARC step-by-step with images

Step 1

What is Spoofing and How To Protect Your Google Workspace (DMARC Record) - Step 1

To set up DMARC, first, log in to your account at your DNS hosting provider. Then go to the section where you can update your records and start creating a new TXT record.

Here is a list of links to the most frequently used hosting providers’ pages that show you how to add records and contact support.

​If you don’t see your hosting in the list, go to Google Search and look for “add txt record -your domain host’s name here-” (for example: add txt record siteground.com), 

Then follow your domain host’s instructions on creating a TXT record. If you can’t find instructions or they’re not helpful, contact the hosting’s support team.

_________________________

The TXT Host name should be “_dmarc.yourdomain” – replace yourdomain with your domain. For example, for workspace123.com, the Host name is _dmarc.workspace123.com 

Next, add the text “v=DMARC1; p=reject; rua=mailto:youremailaddress@yourdomain”

v=DMARC1 means that this is a DMARC record.

p=reject means that any email that fails the checks will be rejected. 

Alternatively, you can set p to none – this way, no action is taken, but you get notified when a message fails DMARC checks via the DMARC report. You can also set p to quarantine. This way, all affected emails will be marked as spam. 

rua=mailto:youremailaddress@yourdomain – this specifies the email address which will receive the DMARC reports. Substitute youremailaddress@yourdomain with your actual email address.

After adding the DMARC TXT record, make sure to save it!

You can do more with DMARC, but the ideal record you aim to have at the end is the one above. You may like to start with p=none or p=quarantine at the beginning so that you don’t end up rejecting any legitimate emails.

Google has more info on DMARC records here https://support.google.com/a/answer/2466563. It may take up to 24 hours for the TXT record to start working.

Step 2

What is Spoofing and How To Protect Your Google Workspace (DMARC Record) - Step 2

To confirm that you have added it correctly, go to https://toolbox.googleapps.com/apps/main/ and click Dig.

Step 3

What is Spoofing and How To Protect Your Google Workspace (DMARC Record) - Step 3

Under Name, type _dmarc.yourdomain.com and click TXT.

You will see the record in the information field below.

Note that even if you see the record here, it may take time to start working – usually up to 24 hours.

If you don’t see it, it’s best to check with your hosting’s support team to ensure everything is all right.

That's all! You reached the end of the article. Continue to:

If you find this useful, share and help others!

Email
Reddit
Facebook
Telegram
Twitter
LinkedIn
Pinterest
Email Marketing Tools
Better Gmail and email marketing
If you work with Gmail or do email marketing, you will appreciate what these services can do for you.
Protect And Secure Google Workspace
Protect your data and maximize security
Data protection and security tools are crucial, especially if you store any sensitive data in your accounts.
Collab And Optimization Tools
Process optimization and collaboration
You can use these services to make tedious processes a whole lot easier, improve teamwork, save time, and get better results.
Website Tools and Resources
Resources for website creators
Awesome tools and services for easy and effective site building, content creation, SEO, email marketing, and more.
Improve Google Workspace
Get the best out of Google Workspace
Add essential functionality such as backup and increased security, get new awesome features, and optimize your work with these additional services for Google Workspace.

Submit Feedback

Think we could do something better or just want to tell us how happy you are with the site? We would love to hear from you – your feedback is more valuable than you can imagine.

Fill out this form, and we will get back to you.

Report An Issue With Workspace123

Are you running into an issue with the site? Maybe you found a broken link, or something else is wrong?

Fill out this form to let us know, and we will address it as soon as possible.

Please make sure to be very specific and add as many details as possible.

Missing Content

Our goal is to run the number one site in the world for you to get help with and learn how to use Google Workspace. This can’t be so if there is any missing information.

If you believe we need to add something, fill out this form, and we will do our best to add any missing content as soon as possible.

This site uses cookies to ensure you get the best experience. Click here to see our Cookies Policy.

Be the first to know

You can stay on top of news and updates in Google Workspace and Workspace123 and get special offers by subscribing to our newsletter.

Subscribe by email for news and updates
Seraphinite AcceleratorOptimized by Seraphinite Accelerator
Turns on site high speed to be attractive for people and search engines.