This guide walks you through adding the email security settings your domain needs — DMARC, SPF, and DKIM — for domains originally registered with Google Domains. These are entries in your domain’s public directory (DNS records) that help email providers verify messages really come from you. In 2023, Google sold Google Domains to Squarespace, so your settings are now managed through the Squarespace Domains interface.
📢 Google Domains → Squarespace Migration
If you registered your domain through Google Domains, it has been transferred to Squarespace Domains. Your DNS records were migrated automatically, and you can now manage them at domains.squarespace.com.
If you previously used the Google Domains interface, look for a Squarespace account associated with your Google account — the migration should have been automatic.
📋 Before You Start
Make sure you have:
- Access to your Squarespace Domains account
- Your domain using Squarespace/Google nameservers
- Your DMARC record — use our DMARC Record Generator
- Your SPF record value from your email provider
Finding DNS Settings
- Go to
domains.squarespace.comand log in - Click on your domain name
- In the left sidebar, click DNS → DNS Settings
- You’ll see your existing DNS records and can add new ones
If you’re using Squarespace for your website too, DNS settings may be under Settings → Domains → your domain → DNS Settings within the main Squarespace dashboard.
Step 1: Add Your DMARC Record
- In DNS Settings, click Add Record (or the + button)
- Fill in the fields:
Type TXTHost _dmarcData v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comTTL 3600(1 hour, default) - Click Add to save the record
Squarespace (like Google Domains before it) automatically appends your domain. Enter just
_dmarc in the Host field — not the full _dmarc.yourdomain.com.
Step 2: Add or Update Your SPF Record
- Check existing records: Look for a TXT record with Host
@containingv=spf1 - If one exists: Click to edit it and add your email provider’s include. For example, to add Google Workspace: change the value to include
include:_spf.google.com - If not: Click Add Record with:
Type TXTHost @Data v=spf1 include:_spf.google.com ~allTTL 3600 - Click Add to save
If you use Google Workspace email, your SPF record likely already includes
_spf.google.com. Check before adding — duplicate SPF records break email delivery. See SPF Record Syntax.
Step 3: Add DKIM Records
- Get DKIM details from your email provider (for Google Workspace, go to Admin Console → Apps → Google Workspace → Gmail → Authenticate email)
- Click Add Record in DNS Settings
- Set Type to
TXT - For Host, enter the selector (e.g.
google._domainkey) - Paste the DKIM key value in the Data field
- Click Add
If you use Google Workspace, DKIM setup is in the Google Admin Console (not Squarespace). Google generates the DKIM key — you then add it in Squarespace DNS. After adding the DNS record, go back to Google Admin and click Start authentication.
Squarespace DNS Tips
DNS changes in Squarespace usually go live within 1–4 hours. In some cases it may take up to 48 hours.
If you set up Google Workspace through the Squarespace dashboard, some DNS records may be added automatically. Check existing records before adding duplicates.
Don’t add quotation marks around TXT values — Squarespace handles quoting automatically.
Squarespace offers its own email hosting (via Google Workspace). If you use this, SPF and DKIM may already be configured for your domain.
Verify Your Records
- Wait 1–4 hours for changes to go live
- Use the Domain Checker to verify all records are live
- Send a test email and check headers for verification results
- If records don’t appear, verify your nameservers haven’t been changed to a third-party provider
What’s Next?
- Learn about DMARC tags: DMARC Record Explained
- Set up Google Workspace email auth: DMARC for Google Workspace
- Plan enforcement: Moving from p=none to p=reject
- Generate your record: DMARC Record Generator