How to Set Up SPF, DKIM, and DMARC in GoDaddy
TL;DR: SPF, DKIM, and DMARC in GoDaddy
SPF, DKIM, and DMARC help prove your emails are legitimate. They help inbox providers trust that messages from your domain are really from you.
Check your email provider before adding records. GoDaddy email, Microsoft 365, Google Workspace, CRMs, website forms, and email tools can all need different records.
Only use one SPF record. If multiple tools send from your domain, merge them into one SPF record instead of adding duplicates.
Add SPF and DKIM before DMARC. If you are unsure, start DMARC with p=none so you can monitor before enforcing stricter rules.
Test everything after setup. Saving a record in GoDaddy does not always mean SPF, DKIM, and DMARC are passing correctly.
Email deliverability sounds boring until your business emails start landing in spam.
Then it matters because no one sees your emails.
I have seen small business owners set up a domain, build a website, create a professional email address, and still have one major problem: their emails do not look trustworthy to inbox providers.
Not because they are spam.
Not because they are doing anything shady.
Their DNS records just were not finished.
That is where SPF, DKIM, and DMARC come in.
These records help prove that emails from your domain are actually allowed to come from your domain. Basically, they tell Gmail, Outlook, Yahoo, and other inboxes, “Yes, this email is really from us.” GoDaddy explains that SPF, DKIM, and DMARC work together to protect and authenticate your email, while Google recommends setting all three up for better email delivery.
But here is where people mess it up.
They copy a random SPF record from a tutorial. They add two SPF records by accident. They put DKIM in the wrong place. They add DMARC before they even know which tools send email from their domain.
Then they wonder why email gets weird.
This guide will walk through how to set up SPF, DKIM, and DMARC in GoDaddy the practical way. We will cover what each record does, how to know which values you need, where to add them in GoDaddy, what mistakes to avoid, and how to test everything before you assume it is fixed.
Quick Answer: Add SPF and DKIM First, Then Add DMARC
The safest order is:
Confirm where your DNS is managed
Identify your email provider
Check your current DNS records
Add or update SPF
Add DKIM
Add DMARC
Wait for DNS to update
Test everything
The biggest rule is simple:
Do not copy random DNS records until you know which tool actually sends your email.
That is how people break email.
If you are new to this and still getting comfortable with domains, email, hosting, and DNS, start by learning what GoDaddy is and how it works. It makes the rest of this setup much easier to understand.
What Are SPF, DKIM, and DMARC?
Before you edit anything, it helps to know what each record actually does.
SPF Tells Inboxes Who Can Send for Your Domain
SPF stands for Sender Policy Framework.
Think of it like an approved sender list.
It tells inbox providers which servers are allowed to send email for your domain. For example, if you use Google Workspace, your SPF record should include Google. If you use GoDaddy Professional Email, your SPF record should include GoDaddy’s sending system.
SPF usually lives as a TXT record in your DNS.
DKIM Adds a Signature to Your Emails
DKIM stands for DomainKeys Identified Mail.
It adds a digital signature to outgoing emails. That signature helps prove the message was sent by an approved system and was not changed along the way.
You usually get your DKIM record from your email provider. That might be GoDaddy, Microsoft 365, Google Workspace, or another tool.
DMARC Tells Inboxes What to Do When Email Fails
DMARC stands for Domain-based Message Authentication, Reporting, and Conformance.
It tells inbox providers what to do if an email fails SPF or DKIM checks.
The three common DMARC policies are:
p=none: monitor only
p=quarantine: send suspicious emails to spam or junk
p=reject: reject suspicious emails
A simple way to think about it:
SPF says who can send. DKIM proves the message is signed. DMARC tells inboxes what to do if something fails.
Before You Touch GoDaddy DNS, Check These 3 Things
This is the part people skip.
Do not skip it.
1. Is Your DNS Actually Managed in GoDaddy?
GoDaddy records only matter if your domain uses GoDaddy DNS.
Your domain might be registered at GoDaddy, but DNS could still be managed somewhere else. That could be Cloudflare, Squarespace, Wix, Namecheap, your website host, or another provider.
If your DNS is not managed in GoDaddy, adding SPF, DKIM, and DMARC in GoDaddy will not help.
Before changing anything, learn how to manage GoDaddy DNS records, because one wrong TXT or CNAME record can create real email problems.
2. Which Email Provider Are You Using?
This matters more than people think.
Common setups include:
GoDaddy Professional Email
Microsoft 365 from GoDaddy
Google Workspace
GoDaddy hosting email or cPanel email
Website forms
CRMs
Newsletter tools
Scheduling tools
Invoicing software
Your normal inbox might be Microsoft 365, but your website contact form might send through another tool.
Both need to be considered.
3. Do You Already Have Records?
Inside GoDaddy DNS, look for:
A TXT record at @ that starts with v=spf1
A TXT record at _dmarc that starts with v=DMARC1
DKIM records that include _domainkey
Old records from past email platforms
Take screenshots before you edit anything.
Seriously.
It gives you something to go back to if something breaks.
A lot of business owners get into trouble because their domain, email, website, and marketing tools are all connected in different places. Those are some of the most common GoDaddy mistakes I see.
How to Find Your DNS Records in GoDaddy
The basic path usually looks like this:
Sign in to GoDaddy
Open your Domain Portfolio
Choose your domain
Open DNS
Review your existing records
Add, edit, or delete records carefully
You are mainly looking for TXT and CNAME records.
SPF is usually a TXT record.
DMARC is usually a TXT record.
DKIM may be TXT or CNAME depending on your email provider.
If you are still setting up the inbox itself, make sure you know how to set up a professional email address with GoDaddy before changing authentication records.
How to Set Up SPF in GoDaddy
SPF is usually added as a TXT record.
The host or name is usually:
@
The value depends on your email provider.
SPF for GoDaddy Professional Email
For GoDaddy Professional Email, GoDaddy lists this SPF value:
v=spf1 include:secureserver.net -all
GoDaddy also warns that a domain should only have one SPF record. Multiple SPF records can cause delivery problems.
SPF for Google Workspace in GoDaddy
If you use Google Workspace, Google lists this SPF value:
v=spf1 include:_spf.google.com ~all
Google’s Workspace guidance also says bulk senders need SPF, DKIM, and DMARC, and Google recommends these records for email delivery in general.
SPF for Microsoft 365
If you use Microsoft 365, use the SPF value shown in Microsoft 365 or GoDaddy’s Email & Office Dashboard.
Do not guess.
Do not copy from another domain.
Use the value from your actual account.
SPF for Multiple Email Tools
This is where a lot of people make a mess.
Bad setup:
One SPF record for Google
One SPF record for Mailchimp
One SPF record for a CRM
Better setup:
One combined SPF record.
Example:
v=spf1 include:_spf.google.com include:senderservice.com ~all
Only use the sender values your tools provide.
The rule is simple:
One SPF record. Multiple approved senders inside that one record.
How to Set Up DKIM in GoDaddy
DKIM is usually generated by your email provider.
That means you do not create your own DKIM value from scratch.
You get it from the platform sending your email.
DKIM for GoDaddy Professional Email
For GoDaddy Professional Email, GoDaddy says users can find their SPF, DKIM, and DMARC records inside the Email & Office Dashboard. Their Professional Email setup includes DKIM CNAME records and recommends adding SPF and DKIM before DMARC.
You may see DKIM names like:
secureserver1._domainkey
secureserver2._domainkey
Use the exact records GoDaddy gives you.
DKIM for Microsoft 365
For Microsoft 365, DKIM usually uses two CNAME records.
They often look like:
selector1._domainkey
selector2._domainkey
But the target values need to come from Microsoft 365.
After adding the records in DNS, you may still need to go back to Microsoft and enable DKIM.
DKIM for Google Workspace
For Google Workspace, generate DKIM inside Google Admin.
Google may give you a TXT record with a selector such as:
google._domainkey
After adding the DKIM record in GoDaddy, go back to Google Admin and start authentication.
Common DKIM Mistakes
Watch for:
Adding the record to the wrong DNS provider
Copying the host name wrong
Copying the value wrong
Forgetting to enable DKIM after adding the record
Not waiting long enough for DNS to update
Leaving old DKIM records from a past provider
Confusing TXT DKIM with CNAME DKIM
DKIM is not hard, but it is picky.
One wrong character can make it fail.
How to Set Up DMARC in GoDaddy
DMARC is usually a TXT record.
The host or name is:
_dmarc
The value starts with:
v=DMARC1
Safe Starter DMARC Example
If you are not sure which tools send email from your domain, start with monitor mode:
v=DMARC1; p=none; rua=mailto:you@yourdomain.com;
This does not tell inboxes to reject email.
It gives you visibility first.
Stronger DMARC Example
Once SPF and DKIM are working, you can move toward a stronger policy:
v=DMARC1; p=quarantine; pct=100; rua=mailto:you@yourdomain.com;
GoDaddy gives DMARC examples and explains that DMARC can use policies like none, quarantine, and reject. GoDaddy also notes that the email after rua= is used for reports.
Do Not Start With Reject Too Soon
p=reject is the strongest policy.
It can be useful once your setup is clean.
But if your CRM, website form, billing platform, booking tool, or email marketing software is not authenticated yet, a strict DMARC policy can block legitimate mail.
Start with visibility.
Then tighten later.
What the Records May Look Like in GoDaddy DNS
Use these as examples only.
Always use the exact values from your provider.
GoDaddy Professional Email Example
SPF: TXT at @
DKIM: CNAME records from GoDaddy
DMARC: TXT at _dmarc
Google Workspace Example
SPF: TXT at @
DKIM: TXT from Google Admin
DMARC: TXT at _dmarc
Microsoft 365 Example
SPF: TXT at @
DKIM: CNAME records from Microsoft 365
DMARC: TXT at _dmarc
The record type, host, and value all matter.
Do not change one because it “looks close enough.”
How Long Do GoDaddy DNS Changes Take?
GoDaddy says DNS changes often take effect within an hour, but they can take up to 48 hours globally.
So do not panic if a record does not verify right away.
Check again after:
15 to 60 minutes
A few hours
24 hours
48 hours if needed
If it still fails after 48 hours, something is probably wrong with the record type, host, value, or DNS provider.
How to Test SPF, DKIM, and DMARC
After setup, test everything.
You can:
Send a test email to Gmail and check message details
Use a DNS lookup tool
Check Google Admin if you use Google Workspace
Check Microsoft 365 admin if you use Microsoft 365
Check GoDaddy Email & Office Dashboard if you use GoDaddy email
Watch for warnings like:
SPF fail
DKIM fail
DMARC fail
DKIM not found
Unauthenticated sender
Emails landing in spam
Bouncebacks from Gmail or Yahoo
Saving a record is not the same as passing authentication.
Troubleshooting SPF, DKIM, and DMARC in GoDaddy
“I Have More Than One SPF Record”
Merge them.
You should usually have one SPF record at @.
If multiple tools send email from your domain, include them inside one SPF record.
“My SPF Record Looks Different Than Another Guide”
That may be normal.
GoDaddy email, Google Workspace, Microsoft 365, website forms, CRMs, and newsletter tools can all use different values.
Use the value from the tool that sends your email.
“DKIM Still Says Not Authenticated”
Common causes include:
DNS has not updated yet
Wrong selector
Wrong host or name
Record added to the wrong DNS provider
DKIM was not turned on after the record was added
Old DKIM records are still in DNS
“Will DMARC Block My Emails?”
It depends on the policy.
p=none monitors.
p=quarantine can send failing mail to spam.
p=reject can block failing mail.
If you are unsure, start with p=none.
“My Website or CRM Sends Email Too”
Make a list of every tool that sends email from your domain.
That may include:
Google Workspace
Microsoft 365
GoDaddy email
Website forms
CRM
Email marketing software
Booking software
Invoice software
Review request platform
Each one may need SPF, DKIM, or both.
If you use GoDaddy for more than just a domain, it helps to understand how GoDaddy online marketing tools connect with your website, email, forms, and business setup.
Best Practices Before You Publish DMARC
Use this checklist before you turn on a stronger DMARC policy:
Confirm your DNS provider
Confirm your email provider
Find every tool that sends email from your domain
Keep only one SPF record
Add DKIM for each main sending platform
Start DMARC with p=none if unsure
Move toward p=quarantine or p=reject after testing
Save screenshots before making changes
Recheck records after switching email providers
And one more thing.
Do not wait until emails start bouncing to fix this.
A few small DNS improvements now can prevent bigger problems later. That is the same reason I recommend business owners learn simple GoDaddy hacks that make their domains, websites, and email easier to manage.
SPF, DKIM, and DMARC in GoDaddy Help Your Email Look Trustworthy
SPF, DKIM, and DMARC in GoDaddy are not just random DNS records you add because an email tool told you to.
They are part of your business’s trust layer.
SPF tells inbox providers which servers are allowed to send for your domain. DKIM adds a signature that helps prove the message is real. DMARC tells inbox providers what to do when something fails authentication.
When those records are missing or wrong, your emails can look suspicious. They may go to spam, fail authentication, bounce, or show warnings that make your business look less professional.
The biggest thing to remember is this:
Do not copy records blindly.
Figure out who actually sends email from your domain first. That might be GoDaddy Professional Email, Microsoft 365, Google Workspace, your website forms, your CRM, your invoicing tool, or your email marketing software.
Then add SPF and DKIM.
Then add DMARC.
Then test everything.
Your email should not lose trust because your DNS records were never finished.
If you are not sure which records belong in your GoDaddy account, we at Schulze Creative can help you clean up your DNS, set up SPF, DKIM, and DMARC, and make sure your business email is connected correctly. Book a free consultation today and let’s get it sorted before it costs you leads, replies, or trust.
FAQs: SPF, DKIM, and DMARC in GoDaddy
What are SPF, DKIM, and DMARC in GoDaddy?
SPF, DKIM, and DMARC are DNS records that help authenticate email from your domain. In GoDaddy, you add these records inside your domain’s DNS settings if GoDaddy manages your DNS.
Do I need SPF, DKIM, and DMARC for GoDaddy email?
Yes, it is recommended. They help prove your emails are legitimate, reduce spoofing risk, and improve deliverability. Google and GoDaddy both recommend using SPF, DKIM, and DMARC for email authentication.
Where do I add SPF, DKIM, and DMARC in GoDaddy?
Sign in to GoDaddy, open your Domain Portfolio, choose your domain, and open DNS. SPF and DMARC are usually TXT records. DKIM may be TXT or CNAME depending on your email provider.
What is the SPF record for GoDaddy email?
For GoDaddy Professional Email, GoDaddy lists this SPF value: v=spf1 include:secureserver.net -all. Always confirm inside your GoDaddy Email & Office Dashboard before editing live DNS records.
What is the SPF record for Google Workspace in GoDaddy?
The common Google Workspace SPF record is v=spf1 include:_spf.google.com ~all. If other tools also send email from your domain, merge those senders into the same SPF record instead of creating duplicates.
Can I have more than one SPF record in GoDaddy?
No. You should generally have one SPF record. If multiple tools send email from your domain, merge them into one SPF record instead of adding separate SPF records.
What DMARC policy should I start with?
Start with p=none if you are unsure which tools send email from your domain. After SPF and DKIM are passing for your real senders, move toward p=quarantine or p=reject.
How long does GoDaddy DNS take to update?
GoDaddy says DNS changes usually take effect within an hour, but they can take up to 48 hours globally.
Why are my emails still going to spam after setting up SPF, DKIM, and DMARC?
Authentication helps, but it does not fix every deliverability problem. Emails can still go to spam because of poor sender reputation, spammy content, bad lists, missing DKIM, failed DMARC alignment, or third-party tools that are not authenticated.
Can Schulze Creative help set up SPF, DKIM, and DMARC in GoDaddy?
Yes. We at Schulze Creative can help small businesses clean up GoDaddy DNS, set up SPF, DKIM, and DMARC, and make sure business email is connected correctly.
Does Schulze Creative help with GoDaddy DNS and business email setup?
Yes. We at Schulze Creative help small businesses with GoDaddy DNS, domain setup, website connections, professional email setup, and related technical issues that affect online trust and lead flow.
