Set up SPF, DKIM, and DMARC on GoDaddy
Add SPF, DKIM, and DMARC as TXT records in GoDaddy's DNS records editor (Domain Portfolio → your domain → DNS → Add New Record), using @ for the root and _dmarc for DMARC.
Where to add records on GoDaddy
Sign in at godaddy.com. Fastest path: open your account menu → "My Products", and under "Domains" (Portfolio tab) click the ellipsis "..." next to the domain → "Edit DNS". Equivalent path: open "Domain Portfolio", click the domain name to open its "Domain Settings" page, then select the "DNS" tab/button. Either route opens the DNS records editor, where all records (A, CNAME, MX, TXT, NS) are listed under a section labeled "Records" (some accounts show "DNS Records"). Note: domains with Domain Protection / 2-step verification may prompt for an SMS, authenticator, or one-time-password code before you can edit.
- Sign in to GoDaddy, open My Products (or Domain Portfolio), and reach the DNS records editor — either via the '...' ellipsis next to the domain → 'Edit DNS', or by clicking the domain → Domain Settings → DNS tab.
- Under the 'Records' section, click 'Add New Record' (some/older accounts show just 'Add').
- From the Type drop-down choose 'TXT'.
- In the Name field enter the host: type @ for the root domain, or _dmarc for a DMARC record (GoDaddy auto-appends your domain — never type the full FQDN).
- Paste the record string into the Value field (no surrounding double quotes), and leave TTL as '1 Hour' (Default) unless you have a reason to change it — the TTL drop-down also offers a 'Custom' option that lets you enter seconds.
- Click 'Save'. To enter SPF, DKIM and DMARC in one sitting, click 'Add More Records' before saving, then 'Save All Records' to commit them together.
- Allow time to propagate — usually within an hour, but up to ~48 hours globally; wait ~30+ minutes before testing a new record.
The three records on GoDaddy
SPF Sender Policy Framework
SPF is a TXT record on the root domain: set the Name field to @ (GoDaddy's root token — not blank). Value is your full policy, e.g. v=spf1 include:secureserver.net -all (swap the include for your actual sender — secureserver.net is GoDaddy's own mail). Paste it exactly so spacing is preserved, with no surrounding quotes. Publish only ONE SPF record per domain — a second TXT starting with v=spf1 causes a PermError and breaks SPF for all mail; merge every sender's includes into a single v=spf1 ... -all string instead.
DKIM DomainKeys Identified Mail
GoDaddy DNS does not generate DKIM keys — your email/sending provider does (Google Workspace, Microsoft 365, GoDaddy Professional Email, an ESP, etc.). Take the selector + value the provider gives you and add it here, matching the record TYPE the provider specifies: Microsoft 365 and most ESPs hand you CNAME records (Name = selector1._domainkey / selector2._domainkey pointing to the provider's host) — in that case choose Type = CNAME, not TXT. Google Workspace, by contrast, gives you a raw public key to add as a TXT record at google._domainkey (value v=DKIM1; k=rsa; p=...). So pick the type per provider; don't assume DKIM is always a TXT record. Note: a long 2048-bit DKIM TXT value can exceed the 255-character-per-string DNS limit — GoDaddy's editor usually accepts the full single string, but if it rejects it with 'invalid record data', split the value into ≤255-character chunks, each wrapped in double quotes with a space between them (this split is the one case where quotes ARE used in the Value field; verifiers concatenate the strings back).
DMARC reporting and policy
DMARC is a TXT record with the Name field set to exactly _dmarc (GoDaddy appends your domain to make _dmarc.yourdomain.com — do not type the full _dmarc.yourdomain.com yourself). Value is a single-line policy, e.g. v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com — start with p=none to monitor, then tighten to quarantine/reject. Keep it all on one line, no surrounding quotes, and use a real mailbox for the rua address.
Need the record values? Generate a valid SPF and DMARC record with the record generator, then learn what each one does: SPF, DKIM, DMARC.
GoDaddy gotchas
- Root host = @, not blank. GoDaddy uses @ to mean the apex/root domain. Subhosts (like _dmarc or selector1._domainkey) are entered relative — GoDaddy auto-appends your domain, so typing the full FQDN double-appends it (e.g. _dmarc.yourdomain.com.yourdomain.com).
- Do NOT wrap a normal Value in double quotes. GoDaddy handles the zone-file quoting for you; manually added quotes become literal characters and break SPF/DKIM/DMARC parsing. The ONLY exception is a long TXT value you've deliberately split into multiple ≤255-char strings, where each chunk must be quoted.
- 255-character-per-string limit on long DKIM (2048-bit) values can trigger an 'invalid record data' error. GoDaddy usually accepts the full single string now; if it errors, split into ≤255-char double-quoted strings (DKIM verifiers concatenate them) rather than shortening the key.
- Only ONE SPF (v=spf1) TXT record may exist per domain — a second one is a PermError. Merge all senders' includes into a single record.
- TTL defaults to '1 Hour' (the drop-down also has a 'Custom' seconds option). Propagation is usually within an hour but can take up to ~48 hours globally — wait ~30+ minutes before testing.
- Entering several records at once: click 'Add More Records' to stack them, then the save button reads 'Save All Records' (not just 'Save'). Domains with Domain Protection/2SV may require an extra verification code before edits go through.
Records set. Now make sure you actually land.
SPF, DKIM, and DMARC on GoDaddy get you authenticated, but inbox placement also needs sender reputation and domain warmup. Scheduler Zero handles both so your cold email reaches the inbox.