Add SPF, DKIM and DMARC to my domain for Professional Email

Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-based Message Authentication, Reporting & Conformance (DMARC) are used together to protect and authenticate your email.

SPF allows you to specify which servers can send email from your domain, while DKIM adds a digital signature to your emails to prove that they came from your domain. If an email fails SPF or DKIM checks, DMARC specifies how to handle and report those messages.

Step 1: Find your records

First, you need to go to your Email & Office Dashboard to find your records.

1. Sign in to your Email & Office Dashboard (use your GoDaddy username and password).
2. Under Users, next to your user, select Manage.
3. Under Manage, select Set mail destination or, in the banner at the top, select Help me fix this.
4. Under step 2, you’ll see your DKIM CNAME records (there are 2, and each one includes “dkim” in the target).
5. Under step 5, you’ll see your SPF TXT record (it includes “spf” in the target) and DMARC TXT record (it includes “dmarc” in the target).

You'll need to enter the details of each record in the next step, so we recommend copying and pasting them into another document.

Step 2: Add the records to your DNS

Next, you need to add the records to your domain. Please make sure you follow the instructions correctly and add SPF and DKIM before DMARC.

1. Sign in to your GoDaddy Domain Portfolio. (Need help logging in? Find your username or password.)
2. Under Domain Name, select your domain.
3. Under your domain name, select DNS.
4. If your domain, DNS and email are in the same GoDaddy account, we've added your SPF record for you, and you can skip to step 5. Otherwise, select Add New Record, and then enter the following details for your SPF record:
   • Type: Select TXT.
   • Name: Enter @.
   • Value: Enter v=spf1 include:secureserver.net -all.
   • TTL: Leave it as Default.
   Required: Please make sure your domain only has one SPF record. If multiple SPF records are found on your domain or if the SPF record is not added correctly, your email might not be delivered.
5. Select Add More Records, and then enter the following details for your first DKIM record:
   • Type: Select CNAME.
   • Name: Enter secureserver1._domainkey. (If you already have a CNAME with this name, please make sure to update it so it uses the correct Value.)
   • Value: Enter the value (target) you saved in step 1.
   • TTL: Select 1 Hour.
6. Select Add More Records, and then enter the details for your second DKIM record:
   • Type: Select CNAME.
   • Name: Enter secureserver2._domainkey. (If you already have a CNAME with this name, please make sure to update it so it uses the correct Value.)
   • Value: Enter the value (target) you saved in step 1.
   • TTL: Select 1 Hour.
7. Select Add More Records, and then enter the following details for your DMARC record:
   • Type: Select TXT.
   • Name: Enter _dmarc.
   • Value: Enter the value (target) you saved in step 1.
   • TTL: Select 1 Hour.
8. Select Save All Records.

You should've added a total of 4 records. Most DNS changes take effect within an hour but could take up to 48 hours to update globally.

More info

• Find out more about how DMARC works from DMARC.org.
• What are my DNS settings for Professional Email?
• What factors affect DNS propagation time?