DNS updates with Google Domains

Google Workspace pre-populates Google Domains with a stock set of DNS records, which can't be edited. In order to update, you can use this workaround (manually copying needed records from the stock set, and then creating new custom records).

What are these records? 

•  MX records: Mail Exchange records direct your inbound mail (to Google)
•  SPF record: Designates who is allowed to send mail from your domain (Google & Paubox)
•  DKIM records: Values used for authentication, to help keep your emails out of spam folders

Step-by-step guide

Part I: Capture & save the existing Google Workspace records

1. 1. Log in to your Google Domains account: domains.google.com
   2. Click DNS in the left-hand panel
   3. Locate the Google Workspace records section and capture 6 values
      • 5 records of type MX (record the values, for example: 1 aspmx.l.google.com)
      • 1 "DKIM" record, of type TXT (this is the record with host value google._domainkey ... capture the very long value that starts with "v=DKIM1; k=rsa ...."
      • Make sure to capture & save these values somewhere safe! They will not be visible later

Part II: Recreate and update the needed records

1. 1. In the Custom Records section, click Manage Custom records in the top right

   2. Click Add Custom Record on the bottom left

   3. Create this new record with the following values: 
      • Hostname: (leave this field blank)
      • Type: MX
      • TTL: 3600 or whatever default value is there is fine
      • Value: 1 aspmx.l.google.com
   4. Click Add More to this Record and add 4 more values to this record in the same way:
      • Value: 5 alt1.aspmx.l.google.com
      • Value: 5 alt2.aspmx.l.google.com
      • Value: 10 alt3.aspmx.l.google.com
      • Value: 10 alt4.aspmx.l.google.com
   5. Click Create Custom Record and create a new SPF record, with these values: 
      • Hostname: (leave this field blank)
      • Type: TXT
      • TTL: 3600 or whatever default value is there is fine
      • Value: v=spf1 include:_spf.google.com include:_spf.paubox.com -all
   6. Click Save in the bottom right to save these custom records
   7. Click Yes, Replace when asked to replace existing records

Part III: Re-add the Google DKIM record

1. 1. Click Manage Custom records again (in the top right)

   2. Click Add Custom Record on the bottom left

   3. Create this new record with the following values: 
      • Hostname: google._domainkey
      • Type: TXT
      • TTL: 10 minutes 
      • Value: (enter the very long value saved from Part I, that starts with v=DKIM1; k=rsa ...)
   4. Click Save in the bottom right

Part IV: Add the Paubox DKIM record

1. 1. Log in to your Paubox dashboard: paubox.com (& Sign In in the upper right if not logged in)
   2. Generate your unique Paubox DKIM key: Overview => DKIM Configuration => Open Settings ... and then select your domain from the dropdown and Generate DKIM Key
   3. Click Copy value
   4. Back in your Google Domains account, click Manage Custom records again (in the top right)

   5. Click Add Custom Record on the bottom left

   6. Create this new record with the following values: 
      • Hostname: paubox._domainkey
      • Type: TXT
      • TTL: 10 minutes 
      • Value: (paste the very long value copied from your Paubox dashboard)
   7. Click Save in the bottom right
   8. Back in your Paubox dashboard, toggle "DKIM Enabled" from Off to On