When you add a TXT record to your domain's DNS settings, you enter specific values depending on what you're using the TXT record for. Below are the values to use when configuring TXT records for various uses with Google services.
You enter these values at your domain host, not in your Google Admin console. Note also that some hosts use different labels for the name and value fields.
Note: Time to Live (TTL) is the number of seconds before subsequent changes to the TXT record go into effect. This value is 3600 for all TXT records. Learn more
| Use case | Name/Host/Alias | Record Type | Value/Answer/Destination |
|---|---|---|---|
| Domain verification |
Blank or @
|
TXT |
Your unique security token provided in the Google Admin console's verification instructions.
|
| Subdomain verification | The name of your subdomain. If your subdomain is sub.example.com, write "sub" for the Host. |
TXT |
Your unique security token provided in the Admin console's verification instructions.
|
| SPF record | Blank or @ | TXT |
To authorize Google mail servers:
|
| DKIM signing | Text from the DNS Host name (TXT record name) field in the Google Admin console | TXT | Text from the TXT record value field in the Admin console. |
| DMARC authentication | _dmarc | TXT | v=DMARC1; p=quarantine\; pct=100\; rua=mailto:postmaster@your_domain.comTo allow third-party recipients to monitor, quarantine, or reject all the messages that claim to be from "your_domain.com" and fail the DMARC checks. You must replace "your_domain.com" with your own domain name. Daily aggregate reports will be sent to "postmaster@your_domain.com" (You'll need to specify a valid email address to receive reports for your domain). |
| TLS reporting | _smtp._tls | TXT | TXT record name: In the first field, under DNS Host name, enter:_smtp._tls.domain.comTXT record value: In the second field, enter: v=TLSRPTv1; rua=mailto:tlsrpt@domain.comrua: The email address you created to get reports. To get reports at multiple emails, separate the email addresses with commas: v=TLSRPTv1; rua=mailto:tlsrpt@domain.com,mailto:mts-sts@domain.comNote: Syntax for the HTTPS report delivery option is described in Report using HTTPS (RFC 8460) |
| MTA-STS reporting | _mta-sts | TXT | TXT record name: In the first field, under DNS Host name, enter:_mta-sts.domain.comTXT record value: In the second field, enter: v=STSv1; id=20190425085700id: Must be 1–32 alphanumeric characters. The ID signals to external servers that your domain supports MTA-STS. You must update the ID to a new, unique value every time you change your MTA-STS policy. |
