Setup Guide

How to Set Up SPF, DKIM, and DMARC for GoDaddy Email (Microsoft 365)

GoDaddy offers business email through a partnership with Microsoft 365. If you purchased email hosting through GoDaddy, your email is actually running on Microsoft's infrastructure. This means the authentication setup is very similar to a standard Microsoft 365 configuration, with a few GoDaddy-specific nuances.

SPF Configuration

Since GoDaddy email runs on Microsoft 365, you use Microsoft's SPF include.

DNS Record:

Type:  TXT
Host:  @
Value: v=spf1 include:spf.protection.outlook.com -all

If you also use other sending services:

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net ~all

GoDaddy DNS Manager: Log in to your GoDaddy account, go to My Products → Domains → DNS Management, and add or edit the TXT record.

Verify your total lookup count with the SenderClarity SPF Checker.

DKIM Configuration

Because GoDaddy email is powered by Microsoft 365, DKIM configuration follows Microsoft's process but is accessed through GoDaddy's admin panel.

  1. Access your Microsoft 365 admin center through GoDaddy (go to Email & Office → Manage).
  2. Navigate to the Microsoft Defender portal (security.microsoft.com).
  3. Go to Email & Collaboration → Policies & Rules → Threat policies → Email authentication settings → DKIM.
  4. Select your domain and follow the CNAME record instructions:
Type:  CNAME
Host:  selector1._domainkey
Value: selector1-yourdomain-com._domainkey.yourdomain.onmicrosoft.com

Type:  CNAME
Host:  selector2._domainkey
Value: selector2-yourdomain-com._domainkey.yourdomain.onmicrosoft.com
  1. Add both CNAMEs to your GoDaddy DNS.
  2. Enable DKIM signing in the Defender portal.

DMARC Configuration

Start with monitoring mode:

Type:  TXT
Host:  _dmarc
Value: v=DMARC1; p=none; rua=mailto:your-address@reports.senderclarity.com; fo=1

Progress to enforcement:

  1. p=quarantine; pct=25
  2. p=quarantine; pct=100
  3. p=reject

Verification

  • Check your SPF record →
  • Send a test email and check the headers
  • Confirm spf=pass, dkim=pass, dmarc=pass
  • Monitor DMARC reports in SenderClarity

Common Issues

GoDaddy's built-in records: GoDaddy sometimes auto-creates SPF records for domains with their email product. Check for existing SPF records before adding a new one — having two SPF records on a domain causes a permanent error.

Accessing Microsoft 365 settings: The admin experience can be confusing when GoDaddy sits between you and Microsoft 365. Some settings are managed in GoDaddy's dashboard and others require the Microsoft 365 admin center. DKIM specifically requires the Microsoft Defender portal.

GoDaddy Website Builder emails: If you use GoDaddy's website builder with forms or e-commerce, those may send email through different infrastructure than your Microsoft 365 mailbox. Check your DMARC reports for any unrecognized sources.

DNS propagation: Changes in GoDaddy's DNS manager can take up to 48 hours to propagate, though it's often much faster.

SPF Lookup Impact

Include Estimated Lookups
spf.protection.outlook.com 2–3

This is the same as a standard Microsoft 365 setup since GoDaddy email runs on Microsoft's infrastructure.