Set Up Your New Domain and Email in Google, and Make It Not Going to Be Spam

So you just bought a new domain - congrats. Now you want a professional email like hello@yourdomain.com instead of yourname.randomnumbers@gmail.com. And more importantly, you want people to actually receive your emails, not find them buried in their spam folder.

Here's the complete walkthrough.

Step 1: Get Google Workspace

Head to Google Workspace and sign up. You'll need your domain name during setup. The Business Starter plan works fine for most people - you get Gmail, Drive, Calendar, and all the essentials.

During signup, Google will ask you to verify domain ownership. Keep that tab open, you'll need it in a minute.

Step 2: Verify Domain Ownership

Google gives you a TXT record to add to your DNS. Go to wherever you manage your domain's DNS (Cloudflare, Namecheap, etc.) and add it:

Type: TXT
Name: @
Value: google-site-verification=your_unique_code_here
TTL: Auto

After adding it, go back to Google and click "Verify." It might take a few minutes for DNS to propagate, but usually it's pretty quick - especially on Cloudflare.

Step 3: Set Up MX Records

MX records tell the internet where to deliver your emails. Delete any existing MX records, then add these:

Set the name/host to @ (or your domain root) and TTL to auto.

Step 4: The Anti-Spam Trinity

This is where most people stop and then wonder why their emails go to spam. You need three things: SPF, DKIM, and DMARC. Think of them as your email's passport, visa, and background check.

SPF (Sender Policy Framework)

This tells receiving mail servers which servers are allowed to send email on behalf of your domain:

Type: TXT
Name: @
Value: v=spf1 include:_spf.google.com ~all
TTL: Auto

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to your emails. In Google Admin Console:

1. Go to Apps > Google Workspace > Gmail > Authenticate Email
2. Select your domain and click Generate New Record
3. Google will give you a TXT record - add it to your DNS

It usually looks something like:

Type: TXT
Name: google._domainkey
Value: v=DKIM1; k=rsa; p=MIIBIjANBg....(long string)
TTL: Auto

After adding the DNS record, go back to Google Admin and click Start Authentication. It can take up to 48 hours, but usually kicks in within an hour.

DMARC (Domain-based Message Authentication)

DMARC ties SPF and DKIM together and tells receiving servers what to do if authentication fails:

Type: TXT
Name: _dmarc
Value: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
TTL: Auto

Start with p=quarantine (sends suspicious emails to spam) instead of p=reject (blocks them entirely). Once you're confident everything works, you can switch to reject.

Step 5: Test Everything

Don't just send an email to yourself - that proves nothing. Use these tools:

• Mail Tester - Send an email to their temporary address and get a score out of 10. Aim for 9+.
• MX Toolbox - Check your DNS records are properly configured.
• Google Admin Toolbox - Google's own MX checker.

Send test emails to friends who use different providers (Gmail, Outlook, Yahoo) and ask them to check if it landed in their inbox.

Common Gotchas

"I did everything but my score is still low"

Check if you have conflicting SPF records. You can only have ONE SPF TXT record. If you're using multiple email services, combine them:

v=spf1 include:_spf.google.com include:other-service.com ~all

"DKIM says pending"

DNS propagation can take time. Wait at least an hour, then try again. If it's still pending after 48 hours, double-check you copied the TXT record value exactly - including the trailing period in some cases.

"My emails land in spam for Outlook users"

Microsoft is notoriously strict. Make sure your domain isn't brand new (warm it up by sending a few emails over a few days), your email content isn't spammy (avoid ALL CAPS, excessive links, and sales-y language in early emails), and your DMARC is properly configured.

The Checklist

Before you call it done:

• Google Workspace is active and verified
• MX records point to Google
• SPF record is added (only one!)
• DKIM is generated and authenticated
• DMARC record is added
• Mail Tester score is 9 or above
• Test emails land in inbox across providers

That's it. Your domain email is set up, authenticated, and ready to send emails that actually get delivered. No more sent from my sketchy-looking-free-email@gmail.com vibes.