Guides • Last Updated 6th April 2026 2 min read

How to Check Google Workspace DNS

A practical guide to checking Google Workspace DNS records, including MX, SPF, DKIM, DMARC, and the signs of a mixed or incomplete setup.

Tools For This Topic

Start by checking whether the domain really looks like Google Workspace

Google Workspace leaves recognisable patterns in DNS, but you should not rely on one signal alone. MX, SPF, DKIM, and supporting mail records all help show whether the domain really looks like a Google Workspace setup.

This is especially useful when you are inheriting a domain, validating a migration, or trying to confirm whether Google Workspace is the active mail platform.

Check the MX records first

The MX records are usually the fastest way to see whether inbound mail is routed toward Google. Older deployments often use the familiar aspmx pattern, while newer documented setups may use smtp.google.com.

The key question is whether the published MX design matches the intended Google Workspace setup and whether old provider records are still mixed in.

Review SPF, DKIM, and DMARC together

A domain can point inbound mail at Google and still have incomplete email authentication. Check whether SPF includes Google's sending infrastructure, whether DKIM is published and active, and whether DMARC is present.

If you only check one of these, it is easy to miss a half-finished setup.

Look for signs of a mixed or partial migration

  • Old MX records from another provider are still present
  • SPF authorises both Google and legacy providers without a clear reason
  • DKIM is published for a provider that no longer appears to be active
  • The domain uses Google verification records but inbound mail goes elsewhere

These patterns do not always mean the setup is broken, but they are strong signs that the environment deserves a closer check before you assume the migration is complete.

A practical Google Workspace DNS check workflow

  • Check MX and confirm the domain looks like Google Workspace
  • Review SPF, DKIM, and DMARC together
  • Look for old provider records or mixed signals
  • If a real email is failing, inspect the message headers too
  • Compare the observed setup with the expected Google Workspace pattern

Use These DNS Pro Tools

If you want to validate this topic in practice, these DNS Pro tools are the fastest next step.

Related Tools

Related Articles