Wix Email Authentication: Add SPF, DKIM, and DMARC Records in Wix (and When You Can't)

If your business email on a Wix domain lands in spam, or a checker says "no DMARC record found", you need three DNS records: SPF, DKIM, and DMARC. Gmail and Yahoo now reject or spam-folder unauthenticated mail, and Wix's own help center tells business email users to add at least SPF. The steps are short, but Wix has two quirks that trip people up.

First: does Wix control your DNS?

Wix connects domains two ways. If your domain uses Wix's nameservers, you edit records in Wix. If it's only pointed to Wix, your records still live at your registrar (GoDaddy, Namecheap, Cloudflare, and so on) and Wix can't change them. Check:

dig +short NS yourdomain.com

If the answers end in wixdns.net, follow the steps below. Otherwise add the same records at your registrar; see our GoDaddy DMARC guide or Cloudflare SPF guide.

Where the records go in Wix

1. Go to Domains in your Wix account.
2. Click the Domain Actions icon (three dots) next to your domain and choose Manage DNS Records.
3. Scroll to the TXT section and click + Add Record.

Quirk 1: when a guide says to use @ for the Host Name, leave the field blank in Wix.

SPF

Look in the TXT section first. If you connected Google Workspace or Microsoft 365 through Wix, an SPF record may already be there. Quirk 2: you can only have one record starting with v=spf1, so edit the existing one rather than adding a second.

• Google Workspace: v=spf1 include:_spf.google.com ~all
• Microsoft 365: v=spf1 include:spf.protection.outlook.com ~all
• Also send through Mailchimp, a CRM, or similar? Add their include to the same record and keep the total under the 10-lookup limit.

DKIM

DKIM comes from your email provider, not Wix. In Google Workspace, generate the key in the Admin console (Apps, Google Workspace, Gmail, Authenticate email). Then in Wix add a TXT record with Host Name set to the selector, usually google._domainkey, and paste the whole v=DKIM1; k=rsa; p=... value as one entry. Go back to Google and click Start authentication. Microsoft 365 uses two CNAME records (selector1._domainkey and selector2._domainkey) instead; add them in Wix's CNAME section, then enable DKIM in Microsoft Defender. Not sure of your selector? See our DKIM checker guide.

DMARC

Add a TXT record with Host Name _dmarc and value:

v=DMARC1; p=none; rua=mailto:you@yourdomain.com

Start at p=none so nothing gets blocked while you read the reports for a couple of weeks. Once only your real senders show up, move to p=quarantine.

Verify

dig +short TXT yourdomain.com | grep spf1
dig +short TXT _dmarc.yourdomain.com
dig +short TXT google._domainkey.yourdomain.com

Then send a message to a Gmail account, open "Show original", and look for SPF: PASS, DKIM: PASS, and DMARC: PASS. Wix DNS changes are often live within an hour but can take up to 48.

Check it the fast way

Want a second opinion in under a minute? Scan your site free with SiteShield. It checks your Wix domain's SPF record and DMARC policy, SSL, security headers, and whether a privacy policy and cookie notice are present and shows your score and every issue found. If you'd rather skip the trial and error, the $14 fix bundle gives you copy-paste fixes written for your exact site.

Check your site free