GoDaddy offers business email through a partnership with Microsoft 365. If you purchased email hosting through GoDaddy, your email is actually running on Microsoft's infrastructure. This means the authentication setup is very similar to a standard Microsoft 365 configuration, with a few GoDaddy-specific nuances.
SPF Configuration
Since GoDaddy email runs on Microsoft 365, you use Microsoft's SPF include.
DNS Record:
Type: TXT
Host: @
Value: v=spf1 include:spf.protection.outlook.com -all
If you also use other sending services:
v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net ~all
GoDaddy DNS Manager: Log in to your GoDaddy account, go to My Products → Domains → DNS Management, and add or edit the TXT record.
Verify your total lookup count with the SenderClarity SPF Checker.
DKIM Configuration
Because GoDaddy email is powered by Microsoft 365, DKIM configuration follows Microsoft's process but is accessed through GoDaddy's admin panel.
- Access your Microsoft 365 admin center through GoDaddy (go to Email & Office → Manage).
- Navigate to the Microsoft Defender portal (security.microsoft.com).
- Go to Email & Collaboration → Policies & Rules → Threat policies → Email authentication settings → DKIM.
- Select your domain and follow the CNAME record instructions:
Type: CNAME
Host: selector1._domainkey
Value: selector1-yourdomain-com._domainkey.yourdomain.onmicrosoft.com
Type: CNAME
Host: selector2._domainkey
Value: selector2-yourdomain-com._domainkey.yourdomain.onmicrosoft.com
- Add both CNAMEs to your GoDaddy DNS.
- Enable DKIM signing in the Defender portal.
DMARC Configuration
Start with monitoring mode:
Type: TXT
Host: _dmarc
Value: v=DMARC1; p=none; rua=mailto:your-address@reports.senderclarity.com; fo=1
Progress to enforcement:
p=quarantine; pct=25p=quarantine; pct=100p=reject
DMARC Considerations for GoDaddy Email
Your reports will look like Microsoft 365, not GoDaddy: Since GoDaddy email runs on Microsoft's infrastructure, DMARC aggregate reports will show Microsoft IP ranges and
outlook.com/protection.outlook.comidentifiers. Don't look for "GoDaddy" in your reports — it won't appear.Watch for auto-created SPF records: GoDaddy sometimes auto-generates SPF records when you activate their email product. If you already had an SPF record, you may end up with two — which causes a permanent SPF failure for your entire domain. Always check for duplicate SPF records after enabling GoDaddy email.
GoDaddy Website Builder is a separate sending source: If you use GoDaddy's website builder for e-commerce or contact forms, those emails may originate from different infrastructure than your Microsoft 365 mailbox. These could appear as unidentified failures in your DMARC reports — investigate before moving to enforcement.
Verification
- Check your SPF record →
- Send a test email and check the headers
- Confirm
spf=pass,dkim=pass,dmarc=pass - Monitor DMARC reports in SenderClarity
Common Issues
GoDaddy's built-in records: GoDaddy sometimes auto-creates SPF records for domains with their email product. Check for existing SPF records before adding a new one — having two SPF records on a domain causes a permanent error.
Accessing Microsoft 365 settings: The admin experience can be confusing when GoDaddy sits between you and Microsoft 365. Some settings are managed in GoDaddy's dashboard and others require the Microsoft 365 admin center. DKIM specifically requires the Microsoft Defender portal.
GoDaddy Website Builder emails: If you use GoDaddy's website builder with forms or e-commerce, those may send email through different infrastructure than your Microsoft 365 mailbox. Check your DMARC reports for any unrecognized sources.
DNS propagation: Changes in GoDaddy's DNS manager can take up to 48 hours to propagate, though it's often much faster.
SPF Lookup Impact
| Include | Estimated Lookups |
|---|---|
spf.protection.outlook.com |
2–3 |
This is the same as a standard Microsoft 365 setup since GoDaddy email runs on Microsoft's infrastructure.