If your domain's DNS is managed at GoDaddy, every record from your email provider goes in GoDaddy's DNS page. The steps are the same whichever provider you use; only the values change.
Where to add records
- Sign in to GoDaddy and open your Domain Portfolio.
- Select the domain, then open DNS (DNS Records).
- Click Add New Record, choose the type, fill in Name and Value, and save.
In the Name field, type only the part before your domain: @ for the root, _dmarc for DMARC, selector._domainkey for DKIM. GoDaddy adds yourcompany.com itself. Typing the full name gives you _dmarc.yourcompany.com.yourcompany.com, which is the single most common mistake on GoDaddy. GoDaddy says most changes take effect within an hour and can take up to 48.
Microsoft 365 from GoDaddy
If you bought Microsoft 365 through GoDaddy, GoDaddy's help gives this SPF record. When the domain, DNS and email are all in the same GoDaddy account, GoDaddy adds it for you:
| Type | Name (host) | Value |
|---|---|---|
| TXT | @ | v=spf1 include:secureserver.net -all |
This differs from Microsoft's standard include:spf.protection.outlook.com, which is for Microsoft 365 bought directly from Microsoft. If you have GoDaddy's Advanced Email Security add-on, the value is different again; the Email & Office Dashboard shows the exact one. Either way, keep a single SPF record and add other senders' includes to it.
GoDaddy's help also says to have SPF in place and DKIM enabled before adding DMARC. DKIM for Microsoft 365 uses two CNAMEs, selector1._domainkey and selector2._domainkey; the Microsoft 365 guide explains them. GoDaddy-run Microsoft 365 accounts restrict some admin pages, so if you can't reach the DKIM settings, GoDaddy's help centre covers its own route.
GoDaddy Professional Email
| Type | Name (host) | Value |
|---|---|---|
| TXT | @ | v=spf1 include:secureserver.net ~all |
DKIM options for Professional Email depend on the plan. Run the checker below after setup to see whether a DKIM key is published for your domain; if none is, DMARC can only pass through SPF, so stay at p=none until signing is in place.
Google Workspace, Zoho or anything else
Use the provider's values (see Google Workspace or Zoho Mail) and add them in the same DNS page. Remove any old include:secureserver.net from SPF if you no longer send through GoDaddy.
DMARC
Once SPF and DKIM both pass, publish DMARC. Start at p=none with a report address you actually read:
| Type | Name (host) | Value |
|---|---|---|
| TXT | _dmarc | v=DMARC1; p=none; rua=mailto:dmarc-reports@yourcompany.com |
On GoDaddy, the Name is just _dmarc. After two to four weeks of clean reports, move to p=quarantine, then p=reject. The safe route to enforcement covers what to look for.
Questions people ask
GoDaddy added a DMARC record for me. Is it right?
Check it with the checker. If it has no rua address, add one, or you won't see who's sending as you.
Should the TTL be changed?
The default (1 hour) is fine. Lower it a day before a big change if you want faster rollback.
Related guides
- SPF, DKIM and DMARC for Microsoft 365 Records and Defender portal steps for Microsoft 365.
- Two SPF records? Merge them into one Why two records fail every message, and how to merge them.
- Moving DMARC from p=none to reject without losing mail The order of steps, how long to wait, and what to look for first.
DNS only shows part of the picture. If mail is still landing in spam with every record right, the deliverability audit looks at the rest: blocklists, reputation, bounces, content and the sending setup.