MX records for Google Workspace and Microsoft 365: the exact records to paste
Google Workspace needs one MX record: smtp.google.com with priority 1, replacing any other MX records. Microsoft 365 uses yourdomain-com.mail.protection.outlook.com. Enter your domain above, pick the provider and your DNS host, and get every record to paste, MX, SPF, DKIM and DMARC, with values copied from the provider's own setup guide.
Sample result
Google Workspace needs 4 DNS records for acme.example: MX, SPF, DKIM and DMARC.
- Provider
- Google Workspace
- MX
- smtp.google.com
- DKIM
- From the Admin console
What this means for you
Add all four at your DNS host; the DKIM value comes from your own Admin console.
- MX, SPF, DKIM and DMARC in one list
- Values from each provider's own guide
- Host formats for DNS panels and zone files
- Marks values unique to your account
- MX
- SPF
- Zone file
By SimpleVerifier Team · Last updated · Runs in your browser; nothing you paste is sent to us
How do I get the right MX records for my domain?
- Enter your domain and pick your mail provider: Google Workspace, Microsoft 365, Zoho Mail, Fastmail or iCloud+.
- Pick your DNS host format: most hosts take @ for the root; Route 53 puts the MX priority in the value; a zone file uses full names with a trailing dot.
- Add any other services that send mail as your domain, such as a newsletter platform, so they go into the same SPF record, and choose a DMARC policy.
- Press Get my DNS records, then copy each record into your DNS host. Values marked as account-specific, such as DKIM keys, come from your provider's admin console.
Example
- You enter
- The domain
acme.example, provider Google Workspace. - You get
- 4 DNS records: MX
1 smtp.google.com, SPFv=spf1 include:_spf.google.com ~all, a DKIM record atgoogle._domainkey.acme.examplewhose value comes from your Admin console, and DMARCv=DMARC1; p=noneat_dmarc.acme.example. - Limits
- No limits; the records are built in your browser.
What are the Google Workspace MX records?
One record: host @, priority 1, value smtp.google.com. Google's MX setup guide says to add it and remove every other MX record, because mail can go astray if old ones stay. Some DNS hosts want a trailing dot (smtp.google.com.); the zone-file format above adds it.
Domains set up before 2023 often have several records starting with aspmx.l.google.com. Google says those legacy values still work and nothing needs changing if mail is arriving; new setups use the single record. To see what a domain publishes now, run an MX lookup.
What is the Microsoft 365 MX record?
It points the domain at Exchange Online: <MX token>.mail.protection.outlook.com, where the token is usually your domain with dots replaced by dashes, such as contoso-com. Microsoft's external DNS records page gives the format and says to give it a lower priority than any other MX record; the admin center shows the exact token for your tenant.
Microsoft 365 also asks for an autodiscover CNAME to autodiscover.outlook.com, an SPF record with include:spf.protection.outlook.com, and two DKIM CNAMEs whose values include your tenant's name, so those come from the Defender portal rather than a formula.
How do I add Google Workspace MX records?
Sign in where your domain's DNS is managed, open the DNS records, delete the existing MX records, and add the record above. Then activate Gmail in the Google Admin console. Changes can take up to the old records' TTL to reach every resolver; the DNS propagation checker shows which already see the new value.
While you're in the DNS settings, add SPF, DKIM and DMARC too. Since 2024, Google and Yahoo require bulk senders to authenticate with SPF and DKIM and publish DMARC; the bulk sender checker tests a domain against all three.
Can I have multiple MX records?
Yes. A domain can have several MX records, and senders try the lowest priority number first, then the others if it's unreachable, as RFC 5321 describes. Zoho asks for three and Fastmail for two, at different priorities; iCloud uses two at the same priority.
What you can't do is mix providers: MX records for two different mail services on one domain send part of your mail to the wrong one. SPF is different again: one domain may publish only one SPF record, so several senders go into one record as includes.
Which MX records does each provider use?
| Provider | MX records | SPF include |
|---|---|---|
| Google Workspace | smtp.google.com (1) | _spf.google.com |
| Microsoft 365 | <token>.mail.protection.outlook.com | spf.protection.outlook.com |
| Zoho Mail | mx.zoho.com (10), mx2 (20), mx3 (50) | zohomail.com |
| Fastmail | in1-smtp.messagingengine.com (10), in2 (20) | spf.messagingengine.com |
| iCloud+ | mx01.mail.icloud.com, mx02 (both 10) | icloud.com |
From each provider's setup guide, checked 17 October 2026.
Who uses this tool, and for what?
- Small businesses
- Move a domain to Google Workspace or Microsoft 365 with every record in one list, instead of piecing it together from four help pages.
- Agencies and IT
- Hand a client the records formatted for their DNS host, with the account-specific values clearly marked.
- Cold emailers
- Set up a new sending domain's MX, SPF, DKIM and DMARC in one sitting before warm-up starts.
- Developers
- Copy the whole set as zone-file lines for a Route 53, BIND or infrastructure-as-code setup.
What can’t this tool tell you?
- DKIM keys, Microsoft's tenant-specific values and iCloud's verification code are unique to your account; the tool marks them and says where to find them.
- Microsoft's MX token is shown in its usual form; confirm it in the Microsoft 365 admin center.
- Zoho values are for its US data center; accounts in the EU, India and other regions use their region's domain, shown in Zoho's admin console.
- It writes records; it doesn't check what your domain publishes now. Use the MX lookup or bulk sender checker for that.
Common questions
- What are Google Workspace MX records?
- One MX record, smtp.google.com with priority 1, for domains set up since 2023. Older setups use several records starting with aspmx, which Google still supports.
- How to add Google Workspace MX records?
- Delete the domain's existing MX records at your DNS host, add an MX record with host @, priority 1 and value smtp.google.com, then activate Gmail in the Admin console.
- How to check Google Workspace MX records?
- Run an MX lookup on the domain. You should see smtp.google.com, or the legacy aspmx records, and nothing else. Any other MX host means some mail is going elsewhere.
- Why are my Google Workspace MX records not working?
- Usually an old MX record is still there, the record went on the wrong host name, or resolvers still have the old value cached. Check with an MX lookup and the propagation checker.
- Can I have 2 MX records?
- Yes, and many providers ask for two or three at different priorities. Don't point MX records at two different mail providers, though; that splits your incoming mail between them.
- What are Google Workspace DNS records?
- MX (smtp.google.com), an SPF TXT record with include:_spf.google.com, a DKIM TXT record at google._domainkey generated in the Admin console, and a DMARC TXT record at _dmarc.
Sources
You audited one domain. Cold outreach means thousands.
This tool checks a domain you type in. It will not tell you which addresses at that domain are real.
- Bulk mailbox verification with real SMTP checks
- The email finder — name plus company to a verified address
- Website enrichment for emails, owner names and socials
One plan, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.