Put Google Workspace on a domain you already own
Material connection. This page includes affiliate links to Google Workspace. If you buy through those links, we may earn a commission. It does not change the price you pay. We do not sell star ratings. Read the full disclosure.
Mail does not “just work” because you bought a domain. The domain needs MX records (and usually SPF, DKIM, and DMARC) that point at Google. If the site already loads, you can attach Google Workspace without moving the website. That is the whole point of this Saturday.
This is a field guide for a one-person US shop, not a 200-seat IT project. We will not screenshot Google’s admin console. Google changes that UI. We will name the jobs in order: create the account, prove you own the domain, write the mail records, turn on 2FA, send a test from a phone that is not on shop Wi-Fi.
Material connection. Links to Google Workspace are affiliate hops. We may earn a commission. Verify current plan names and prices on Google’s site. This is not admin.google.com.
Before you pay
You need a domain you control. If you do not have one, stop and register it first — Start A Site is the Shopfront Stack sister for that job, with GoDaddy as the default registrar.
You need a login at the registrar or DNS host that can edit records. If a nephew or a former “web guy” holds that login, get it back before you buy a mailbox. Transferring a name you do not control is a worse first month than waiting a day.
You need an hour and a coffee. Do not do this during a live launch email blast or while a customer is waiting on a quote.
Decide the first address. Firstname@ is easy to say on the phone. Hello@ is easy to print. You can add an alias later. You cannot easily un-confuse a staff if you invent a cute handle you have to spell twice.
Create the Workspace account in the shop’s name
Sign up at Google Workspace as the business, not as a side project under a personal Gmail you might lose in a divorce or a phone wipe. Put the legal business name or the owner’s name — the same adult who can produce a driver’s license if the account is locked.
Use a recovery email and phone you actually check. Turn on 2FA the same day. Store the customer / admin identifiers somewhere that is not only the inbox you might lock yourself out of.
If two partners own the shop, decide now who is the super admin. Shared Facebook logins are how businesses lose Instagram. Shared Workspace admins without a written understanding are how they lose mail in a breakup. Put the org as the LLC if you have one.
Google will ask you to verify the domain. That is usually a TXT record you paste at the registrar. It is not a nameserver change. Leave nameservers alone unless a setup screen explicitly tells you to change them — and even then, read it twice. Random nameserver edits are how a working site goes dark while you were trying to “connect email.”
MX, SPF, DKIM, DMARC — in plain language
MX records tell the internet where to deliver mail for your domain. Google will show you values to paste. You add them at the same DNS screen where the website’s A record already lives. You do not delete the website records to make mail work.
SPF is a TXT record that lists who is allowed to send as you. DKIM is a cryptographic signature; Google gives you another TXT (or CNAME) to paste. DMARC is a policy TXT that says what receivers should do with mail that fails those checks. You do not need a lecture. You need to paste what Workspace shows, wait, and then send a test.
If your domain is at GoDaddy and the site is on GoDaddy Website Builder, you are editing DNS in that account. If the site later moves to Squarespace or to Hostinger, you will change website records there and keep MX pointed at Google unless you also move mail. Write down what you changed.
TTL (time to live) is how long the old answer is cached. Propagation is “up to 48 hours” in every vendor’s footnote and often 30 minutes in real life. Plan a window when you can wait. Do not promise a customer the new address at 9 a.m. if you started at 8:50.
Do not break the site while you fix mail
The website and the mailbox share a domain. They do not have to share a vendor. A plumber can keep a one-page builder at GoDaddy, mail at Google, and a laptop from wherever it still types. That is allowed.
What is not allowed: deleting the A record “to start clean,” flipping nameservers to a Workspace default you do not understand, or adding a second MX from the registrar’s leftover forwarding product. Two mail systems on one domain is how messages vanish.
If the registrar still has “free forwarding” enabled, turn it off after Workspace MX is live and tested. Leaving both on is a coin flip.
Test like a stranger
After Google says mail is active:
- Send a message from a personal account to the new address. Confirm it arrives.
- Reply. Confirm the reply shows
you@yourdomain.com, not the old Gmail. - Open the address on your phone using cellular data — not the shop Wi-Fi.
- Send a calendar invite to yourself. Meet links are useless if Calendar is still the personal one.
- Put a PDF in Drive and open it on the phone. That is the insurance cert test.
Then, and only then, print the address on the next batch of invoices and update Google Business Profile. Advertising an address that bounces is worse than advertising Gmail.
Admin hygiene that prevents Saturday disasters
Create at least one super admin you control. Do not make a contractor the only admin. If someone helps with DNS, give them a time-boxed role, not the keys.
Turn on 2FA for every seat, including yours. Email is the reset path for the domain, the bank, and the host.
Know where billing lives. Workspace is a subscription. A lapsed seat is how a shop loses mail and search listings in the same weekend — same energy as a lapsed domain. Auto-renew on a card that will not expire unnoticed.
Skip extra Google add-ons in week one unless you can name the job they do in one sentence. Most cannot. Mail, Calendar, Drive, Meet is the kit.
When the test message arrives, you are done with this Saturday. The next one is one mailbox, not ten. The comparison with Microsoft 365 lives on the comparison page. Parent stack: Shopfront Stack.