
DNS & Deliverability
DNS setup guides.
DNS & Deliverability
How to Set Up GoDaddy DNS Records for Email Marketing
Learn how to add SPF, DKIM, DMARC, MX, and tracking records in GoDaddy without duplicate SPF or hostname mistakes.
By Peak Meadow Published September 19, 2026

You configure DNS records in GoDaddy through the Domain Portfolio dashboard. GoDaddy sets a 1-hour default TTL and saves SPF entries as standard TXT records. If your domain already has an SPF record, review it before adding new entries to avoid publishing competing policies.
GoDaddy DNS navigation and nameserver check
To access your DNS records in GoDaddy:
- Log in to the GoDaddy Domain Portfolio.
- Click the domain name you want to configure to open the Domain Settings page.
- Select the DNS tab from the top navigation bar to view your DNS Records table.
Before adding records, check the Nameservers section below the records table. Your domain must use GoDaddy’s default nameservers (typically ending in domaincontrol.com). If your domain uses custom nameservers pointing to an external web host or CDN (such as Cloudflare or WP Engine), GoDaddy will display a message stating that your DNS is managed elsewhere. In that case, you must add your email marketing records in that external provider’s dashboard.
Adding a record in GoDaddy
- In the DNS Records table, click Add New Record.
- Select the record type from the Type dropdown (
TXT,CNAME, orMX). - Enter the Name value:
- For root domain records (such as SPF), enter
@. - For subdomains (such as
_dmarcor a DKIM selector), enter only the subdomain prefix. GoDaddy appends your root domain automatically.
- For root domain records (such as SPF), enter
- Enter the Value provided by your email platform. Do not enclose the string in quotation marks.
- Set the TTL (Time to Live):
- Leave it at the default 1 Hour unless your email provider gives you a specific value.
- If adding an MX record, enter the integer in the Priority field.
- Click Save.
- If GoDaddy Domain Protection is enabled on your account, enter the two-step verification code sent to your phone or authenticator app to authorize the change.
GoDaddy’s current TXT record instructions confirm the field names, default TTL, and update window.
Required authentication records
Receiving mail servers use these three records to verify that messages sent from your domain are authentic.
1. SPF (Sender Policy Framework)
- Type: TXT (do not select or search for an SPF type; the standalone SPF record type was deprecated under RFC 7208)
- Name:
@(GoDaddy applies this to your apex domain) - Value: The SPF string provided by your email platform, such as:
v=spf1 include:_spf.google.com include:sendgrid.net ~all - TTL: 1 Hour
Merging multiple SPF records
Your domain can only have one SPF record. If you use a GoDaddy email product, an SPF record may already exist. Use the exact record shown in your GoDaddy Email & Office dashboard, as the required mechanisms depend on your specific account setup.
Do not add a second TXT record starting with v=spf1. Multiple SPF records cause receiving mail servers to fail SPF evaluation with a PermError, which routes your messages to spam or rejects them.
To authorize your email marketing provider:
- Locate the existing SPF TXT record in your GoDaddy DNS table and click the pencil icon to edit it.
- If your provider tells you to add an
include:statement at the root domain, insert it directly before the concluding qualifier (~allor-all). For example, an existing GoDaddy record might become:v=spf1 include:secureserver.net include:sendgrid.net -all - Save the modified record.
Do not add quotation marks around the SPF string. GoDaddy saves the value literally, and quotes will break the record syntax.
2. DKIM (DomainKeys Identified Mail)
Email platforms provide DKIM records in one of two formats:
CNAME-based DKIM
Most modern email platforms (including Klaviyo, Postmark, SendGrid, and Amazon SES) provide two or three CNAME pairs:
- Type: CNAME
- Name: The selector prefix without your root domain, such as
s1._domainkeyork1._domainkey - Value: The target hostname provided by your email platform, such as
s1.domainkey.example-esp.com. - TTL: 1 Hour
If your email service displays the full hostname like s1._domainkey.yourdomain.com, enter only s1._domainkey into the Name field. Entering the full domain causes GoDaddy to create s1._domainkey.yourdomain.com.yourdomain.com, which breaks authentication lookups.
TXT-based DKIM
Some platforms (such as Google Workspace or custom mail servers) provide a raw public key string:
- Type: TXT
- Name: The selector prefix, such as
google._domainkey - Value: The raw public key string starting with
v=DKIM1; k=rsa; p=... - TTL: 1 Hour
Paste the public key directly into the Value field without quotation marks. GoDaddy supports full 2048-bit keys, so you do not need to split the string.
3. DMARC (Domain-based Message Authentication, Reporting, and Conformance)
- Type: TXT
- Name:
_dmarc(enter only_dmarc; GoDaddy appends your domain) - Value:
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com; pct=100; - TTL: 1 Hour
Start with p=none. This keeps DMARC in monitoring mode so you can collect reports without risking delivery issues. Once SPF and DKIM pass across all sending services, update the policy tag to p=quarantine or p=reject.
Optional deliverability and branding records
These records configure custom subdomains for processing bounces and tracking campaign clicks. If omitted, your email provider routes tracking and bounces through its own shared domains.
4. Custom return path (bounce domain) (optional)
- Type: CNAME
- Name:
bounces(or the subdomain prefix specified in your platform settings) - Value: The mail server hostname assigned by your email platform (such as
pm.mtasv.netorsendgrid.net) - TTL: 1 Hour
5. Branded tracking domain (optional)
- Type: CNAME
- Name:
links(ortrack,click, oremailas specified by your platform) - Value: The tracking hostname assigned by your email platform
- TTL: 1 Hour
Setting up custom MX records (if required)
If your email marketing service requires MX records for incoming replies, automated unsubscribe processing, or dedicated sending subdomains:
- In the DNS Records table, click Add New Record.
- Select MX from the Type dropdown.
- Enter the details:
- Name:
@(or the subdomain prefix if you send from a subdomain likemail) - Priority: The integer specified by your provider (such as
10) - Value: The mail server address provided by your platform (such as
feedback-smtp.us-east-1.amazonses.com) - TTL: 1 Hour
- Name:
- Click Save.
If your primary business email runs through GoDaddy Microsoft 365, do not delete or overwrite your primary MX records pointing to mail.protection.outlook.com. Only add MX records for separate sending subdomains, or add secondary MX records when your provider explicitly instructs you to do so.
Verifying your DNS records
Most GoDaddy DNS changes take effect within an hour, though global propagation can take up to 48 hours.
You can verify your DNS records in Windows PowerShell using Resolve-DnsName:
Check SPF
Resolve-DnsName -Name yourdomain.com -Type TXT
Examine the Strings column. Verify that only one SPF record exists and that your sending provider’s include: tag is present.
Check DMARC
Resolve-DnsName -Name _dmarc.yourdomain.com -Type TXT
Verify that the Strings column contains v=DMARC1; p=....
Check DKIM
Replace s1 with the selector provided by your email platform:
Resolve-DnsName -Name s1._domainkey.yourdomain.com -Type CNAME
If your platform uses TXT-based DKIM, change the -Type argument to TXT. The output should return your provider’s target hostname or public key.
Check tracking and bounce records (if configured)
Resolve-DnsName -Name bounces.yourdomain.com -Type CNAME
The output should show your provider’s hostname in the NameHost column.
Check MX records (if configured)
Resolve-DnsName -Name yourdomain.com -Type MX
Verify that the NameExchange column lists your mail servers with the correct priority numbers in the Preference column.
Common troubleshooting issues
| Issue | Root cause | Solution |
|---|---|---|
Subdomain hostname is duplicated (_dmarc.yourdomain.com.yourdomain.com) |
The full domain was entered into the Name field. | Enter only the prefix (such as _dmarc). GoDaddy appends your root domain automatically. |
| Cannot find SPF record type in dropdown | RFC 7208 deprecated the dedicated SPF record type. | Select TXT as the record type and enter your SPF configuration string into the Value field. |
SPF status shows PermError |
Two separate TXT records begin with v=spf1 (often an existing GoDaddy email record and a new marketing record). |
Delete the second SPF record and merge all include: mechanisms into a single SPF entry. |
| Authentication check fails with syntax error | Quotation marks were pasted into the Value field. | Remove surrounding quotes from the Value field. GoDaddy stores the string literally. |
| DNS table is grayed out or displays an external management message | The domain points to external nameservers. | Check the Nameservers section. If custom nameservers are active, configure your DNS records at that hosting provider. |
| Verification takes a long time to update | The previous record may still be cached. | Recheck the saved value, then allow up to 48 hours for the change to update globally. |
| Changes fail to save | GoDaddy Domain Protection blocked the update. | Complete the two-step verification prompt via SMS or authenticator app when prompted by GoDaddy. |