SPF, DKIM & DMARC on GoDaddy.
Set up SPF, DKIM, and DMARC for a domain whose DNS is managed in GoDaddy. These are the three records that get your mail authenticated; add them in the order below and start DMARC at p=none so you can read the reports before enforcing.
Sign in at godaddy.com, open your Products, find the domain, and choose DNS → Manage DNS (or 'Manage Zones'). Records are added with the 'Add' / 'Add New Record' button.
GoDaddy's editor asks for the Host and Value separately and sometimes rejects a leading '@' — use '@' for the root where offered, or leave Host blank if the UI treats blank as the root. GoDaddy may also wrap long TXT values; paste the whole string as one value and confirm it saved without being truncated. If a DKIM entry is offered as a CNAME by your sending service, add it as a CNAME, not a TXT.
The record values below are illustrative templates. Your real DKIM key, DMARC report address, and SPF includes are specific to your sending service — copy the exact records from that service's console (RadMail generates them for its tenants) and paste those. Adding records never sends mail or changes anything until the records propagate, usually within an hour.
The steps.
Add the SPF record
Add New Record. Type: TXT. Host: @ (your root domain). TXT Value: your SPF string with every sending service included. Confirm you don't already have an SPF TXT record — if you do, edit the existing one to add your include instead of adding a second SPF record.
TXT @ v=spf1 include:your-sending-service.example ~allAdd the DKIM record
Add New Record. If your service gives a TXT key: Type TXT, Host selector._domainkey, Value the public key string. If it gives a CNAME: Type CNAME, Host the selector name your service specified, Value the target hostname your service gave you. Use exactly the selector your sending service issued.
TXT s1._domainkey v=DKIM1; k=rsa; p=MIGfMA0...your-public-key...Add the DMARC record
Add New Record. Type: TXT. Host: _dmarc. Value: begin with p=none and an rua report address so you can see who sends as your domain before enforcing. Once reports are clean, edit the record to p=quarantine, then p=reject.
TXT _dmarc v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com; fo=1Verify propagation
GoDaddy DNS changes can take up to an hour (occasionally longer) to propagate. After that, verify each record resolves with a DNS lookup tool or your sending service's verification button, and check the saved TXT values weren't truncated. Only tighten DMARC to quarantine/reject after reports show your legitimate mail aligning.