https://support.google.com/accounts/answer/185833
IN SHORT: Instead of using the password for the actual Google Workspace user you need to Login to workspace and create an app password from here and use this instead: https://myaccount.google.com/u/3/apppasswords
Sign in with app passwords
Tip: App passwords aren’t recommended and are unnecessary in most cases. To help keep your account secure, use "Sign in with Google" to connect apps to your Google Account.
An app password is a 16-digit passcode that gives a less secure app or device permission to access your Google Account. App passwords can only be used with accounts that have 2-Step Verification turned on.
When to use app passwords
Tip: iPhones and iPads with iOS 11 or up don’t require app passwords. Instead use “Sign in with Google.”
If the app doesn’t offer “Sign in with Google,” you can either:
- Use app passwords
- Switch to a more secure app or device
Create & use app passwords
Important: To create an app password, you need 2-Step Verification on your Google Account.
If you use 2-Step-Verification and get a "password incorrect" error when you sign in, you can try to use an app password.
- Go to your Google Account.
- Select Security.
- Under "Signing in to Google," select 2-Step Verification.
- At the bottom of the page, select App passwords.
- Enter a name that helps you remember where you’ll use the app password.
- Select Generate.
- To enter the app password, follow the instructions on your screen. The app password is the 16-character code that generates on your device.
- Select Done.
If you’ve set up 2-Step Verification but can’t find the option to add an app password, it might be because:
- Your Google Account has 2-Step Verification set up only for security keys.
- You’re logged into a work, school, or another organization account.
- Your Google Account has Advanced Protection.
Tip: Usually, you’ll need to enter an app password once per app or device.
In Joomla Server Configuration:
https://prnt.sc/_noxlEUZtNgC
______________________________________________
IF after all this you are getting a ? by the email received from the email address you have been working on, go to postmaster.google.com and add the domain to the list, copy the text record and add it to the DNS Zone Editor for that domain. Go back to postmaster.google.com and then click o Verify to make sure the text file has been recognised.
Thanks to Tim from Cyber Salt for providing this last piece of information which was not provided by the Google representative who helped me with the initial setup.
_____________________________________________
DKIM
Generate the DKIM from Google workspace (admin.google.com) apps > gmail
Give 48 hrs for the propagation of the txt file before saving.
_____________________________________________
SPF: Name: @
Content: v=spf1 include:_spf.google.com ~all
_____________________________________________
DMARK: Name: _dmarc
Content: v=DMARC1; p=none; rua=mailto:
edit/select quarantine in order for the dmarc to be marked as published.
_____________________________________________
Don't forget to return to Google workspace admin > apps > gmail and click on Save after the authentication process has taken at least 48 hours for propagation.