SPF, DKIM and DMARC · Checked 8 November 2026

GoDaddy SPF, DKIM and DMARC records

The records that let mail sent through GoDaddy pass email authentication, and how to confirm they are published correctly.

Check your domain

Enter your domain, then pick the record to check:

SPF

example.com.  IN  TXT  "v=spf1 include:secureserver.net -all"
  • Publish it as a TXT record on the root host of your domain. GoDaddy gives it with -all at the end.
  • Keep only one SPF record. If the domain already has one, merge include:secureserver.net into it instead of adding a second.
  • If your DNS is hosted somewhere other than GoDaddy, add the record at that provider.
  • Most changes take effect within an hour but can take up to 48 hours.

Syntax and the 10-lookup limit are covered in SPF record syntax.

DKIM

  • For Professional Email, GoDaddy has you add two CNAME records, at the hosts secureserver1._domainkey and secureserver2._domainkey.
  • The targets belong to your account. Copy them from the Email & Office dashboard.
  • For email that comes with a hosting plan, the DKIM key is generated in cPanel or Plesk instead.
  • Add SPF and DKIM before DMARC.
secureserver1._domainkey.example.com.  IN  CNAME  <target from your Email & Office dashboard>.

Not sure which selector a message was signed with? See what is a DKIM selector.

DMARC

DMARC is a separate record that you publish yourself, at _dmarc under your domain. Start by only collecting reports, then tighten the policy once the reports show all your senders passing:

_dmarc.example.com.  IN  TXT  "v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com"

Replace the address with a mailbox you control. What is DMARC explains the policies, and how to read a DMARC report shows what to do with the reports.

Common problems

  • A second SPF record created next to the existing one.
  • Records added at GoDaddy while the domain's nameservers point to another DNS host, so nobody sees them.
  • Only one of the two DKIM CNAMEs added.
  • Publishing DMARC with a strict policy before SPF and DKIM are confirmed.

Failing messages are diagnosed in why DKIM or DMARC fails.

Sources

Values on this page come from the provider's own documentation, last checked on 8 November 2026. Providers change these settings, so confirm against the current page before you edit DNS:

Frequently asked questions

What is the SPF record for GoDaddy email?

v=spf1 include:secureserver.net -all as a TXT record on the root host. Merge it into your existing SPF record if you have one.

Where do I find my GoDaddy DKIM values?

For Professional Email, in the Email & Office dashboard, which gives the targets for the secureserver1 and secureserver2 CNAMEs. For hosting email, in cPanel or Plesk.

Why are my GoDaddy records not showing up?

Check that your domain uses GoDaddy's nameservers. If it uses another DNS host, the records must be added there. Then allow up to 48 hours.

Do I need DMARC with GoDaddy email?

Yes, it is a separate TXT record at _dmarc. Add SPF and DKIM first, start with p=none, and tighten once reports are clean.