On GoDaddy you are editing DNS, not switching on authentication. GoDaddy does not produce SPF, DKIM, or DMARC records for you. Your mailbox provider (Google Workspace, Microsoft 365, or whoever actually sends your mail) hands you the values, and GoDaddy's DNS manager is simply where you enter them. What follows is where that screen lives and, the part that trips people up, exactly what belongs in GoDaddy's Name field, because GoDaddy fills in your domain there for you. To reach it, sign in and open your Domain Portfolio, select the domain, and choose DNS (Domains then DNS). Records sit under DNS Records, and Add New Record creates one. GoDaddy occasionally reshuffles this screen, so if a label has moved, check GoDaddy's current DNS help.
SPF
SPF is a single TXT record on your root domain. In Add New Record, set Type to TXT, put @ in Name (GoDaddy's shorthand for the root of your domain), and paste the value your provider gave you into Value:
v=spf1 include:_spf.google.com ~all
That example authorizes Google to send for you; Microsoft 365 uses include:spf.protection.outlook.com, and other services list their own. Do not wrap the value in quotes, since GoDaddy stores TXT values without them. Your domain may carry only one SPF record. If GoDaddy already shows a v=spf1 line, edit that record and add the new include: before ~all instead of creating a second TXT, which would break SPF with a PermError. Confirm the result with the SPF checker.
DKIM
DKIM is where GoDaddy's two record types matter, because providers issue the key in one of two shapes:
- A TXT key (Google Workspace and many others). Set Type to
TXT, put the selector in Name — for Google that isgoogle._domainkey— and paste the key, which startsv=DKIM1;, into Value. Only the selector goes in Name; GoDaddy adds your domain, sogoogle._domainkeybecomesgoogle._domainkey.yourdomain.comon its own. - A CNAME (Microsoft 365 and some others publish DKIM as CNAMEs). Set Type to
CNAME, put the label your provider lists in Name — for Microsoft that isselector1._domainkey, thenselector2._domainkey— and put the target host they gave you in Value. Microsoft uses two selectors, so you add two CNAME records.
Whichever shape you were handed, publish it exactly as issued and leave the value untouched. Then verify it with the DKIM checker, using the selector your provider named.
DMARC
DMARC is one more TXT record, this time on the _dmarc name. Set Type to TXT, put _dmarc in Name, and start with a monitoring policy in Value:
v=DMARC1; p=none; rua=mailto:you@yourdomain.com
p=none watches without touching delivery and mails aggregate reports to the rua address. Leave it there until the reports show every legitimate sender passing, then step up to p=quarantine and later p=reject. Point rua at a mailbox you actually read, and moving straight to p=reject risks blocking a sender you did not know about. Read your published record any time with the DMARC checker.
MX
MX records decide where inbound mail is delivered, so this is the record most likely to be filled in already. GoDaddy pre-populates MX entries for its own email product, and those fight with your provider's. Before adding anything, look at the MX rows already under DNS Records and edit or delete the ones pointing at GoDaddy so nothing competes.
Then add your provider's MX. Set Type to MX, put @ in Name, put the mail host they gave you in Value, and enter the number they specified in Priority (lower numbers are tried first):
Type: MX Name: @ Value: smtp.google.com Priority: 1
Google Workspace now uses that single smtp.google.com host; Microsoft 365 uses something like yourdomain-com.mail.protection.outlook.com. Enter whatever your provider printed, and check the live result with the MX lookup.
Check your work
GoDaddy usually applies an edit within an hour, though full propagation can run up to 48 hours, so a record that reads back wrong right after you save is often just not live yet. Once it settles, run a lookup from the Relaymetry home page to read SPF, DKIM, DMARC, and MX together and see what passes.
The values themselves come from your mailbox provider, not from GoDaddy: if you are on Google Workspace, its record guide lists them, and for Microsoft 365 the DKIM CNAMEs and MX host are laid out there too. Registered somewhere else? The same records go into a different screen on Namecheap instead. For what SPF, DKIM, and DMARC actually do, rather than where to click, read email authentication explained, or start over from the setup hub.