Repair Google Workspace DKIM

I’m running all of my mail through Google Workspace and messages to Gmail addresses are starting to hit spam. I need a DKIM record set up (I don’t yet have the key) and verified so that Google will show the green “DKIM-signed” tick.

I’m uncertain whether I already have the right level of access to my domain’s DNS zone; if anything is missing you’ll need to walk me through what to request from my registrar or hosting provider so the TXT record can be published correctly.

Once the record is live, I’d like you to confirm alignment in Google Admin, run a test with the Gmail “Show original” header view, and demonstrate that the DKIM, SPF and DMARC results are all “PASS”. If extra tweaks to SPF or DMARC are required to reach that state, please include them in this engagement.

Deliverables
• 1024-bit (or 2048-bit if advised) DKIM key generated in Google Admin
• Correct TXT record string ready to paste into DNS
• Verification that DKIM, SPF and DMARC pass on a live test email
• A short note outlining any future maintenance steps I should remember

That’s the full scope—once it’s passing, we’re done.