How to Add a DMARC Record on GoDaddy (Step-by-Step)

DMARC tells Gmail, Yahoo, and Outlook what to do with mail that pretends to come from your domain. Gmail and Yahoo now expect it from anyone sending bulk mail, and without it your domain is easier to spoof. If your DNS is hosted at GoDaddy, here's how to add it.

Before you start

DMARC only works if SPF and/or DKIM are already set up for the services that send your mail (Google Workspace, Microsoft 365, your email marketing tool). If you haven't done that, set up SPF first. Our DMARC basics guide has a copy-paste SPF record.

Step 1: Open your DNS records

1. Sign in to GoDaddy and open your Domain Portfolio.
2. Pick the domain, then open its DNS tab (DNS records).
3. Check whether a TXT record named _dmarc already exists. You can only have one; if it's there, edit it instead of adding a second.

Step 2: Add the TXT record

Choose Add New Record and enter:

Type:  TXT
Name:  _dmarc
Value: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; fo=1
TTL:   1 Hour (default is fine)

Enter only _dmarc in the Name field. GoDaddy adds your domain automatically, so typing _dmarc.yourdomain.com would create _dmarc.yourdomain.com.yourdomain.com. Replace the rua address with a mailbox you actually read; that's where daily aggregate reports go. Save the record.

Step 3: Verify it

DNS changes at GoDaddy usually show up within an hour. To check from a terminal, run:

dig +short TXT _dmarc.yourdomain.com

On Windows, use nslookup -type=TXT _dmarc.yourdomain.com. You should see the value you entered.

Step 4: Tighten the policy

p=none only monitors. After two to four weeks of reports showing your real senders pass, change it to p=quarantine (failing mail goes to spam), then to p=reject (failing mail is blocked). Moving straight to reject before checking reports can block your own invoices or newsletters.

Common mistakes

• Two DMARC records on the same domain. Receivers treat that as no DMARC at all.
• Missing semicolons between tags, or smart quotes pasted from a document.
• Turning on p=reject while a third-party sender still isn't authenticated with SPF or DKIM.

Not sure what your site is missing? Run a free SiteShield scan to check your email authentication, HTTPS, and security headers in under a minute.

Check your site free