Increase email security with DNSSEC MX records

To enhance your email security, you can optionally use Google's DNS Security Extensions (DNSSEC)-signed MX hosts in your Google Workspace MX records. This is an alternative to using the standard Google value, smtp.google.com.

DNSSEC adds digital signatures to DNS records, including your MX records. This helps verify authenticity by ensuring that the MX records pointing to your email servers are legitimate and haven't been tampered with. DNSSEC also helps prevent your email from being redirected to malicious or unauthorized servers.

To use DNSSEC MX records for your domain’s email, follow the steps in Set up MX records for Google Workspace, with one change: Instead of entering smtp.google.com for the Value / Answer / Destination field (Step 4 of the General Instructions section), enter the MX record priority and server values below.