Email records · GoDaddy · Microsoft 365

How do I set up DKIM at GoDaddy for Microsoft 365?

Copy the two CNAME records Microsoft shows for your domain in the Defender portal, add them in your GoDaddy DNS records at selector1._domainkey and selector2._domainkey, then turn on DKIM signing for the domain in the same portal.

Last read , from the sources at the foot of this page.

Check my firm Read the steps
01

What does DKIM do?

It adds a signature to each message your domain sends. A mail server checks the signature against a key published in your DNS, so a message changed or forged on the way fails.

02

Where does Microsoft 365 make the key?

In the Defender portal, go to Email & collaboration, then Policies & rules, then Threat policies, then Email authentication settings, and open the DKIM tab. Select your domain. Under Publish CNAMEs, Microsoft shows the two values for your domain. Copy them from there: they differ by domain, and a newer domain uses a newer format.

Name of the first record
selector1._domainkey
Name of the second record
selector2._domainkey
03

How do I add them at GoDaddy?

  1. Sign in to GoDaddy and open your Domain Portfolio.
  2. Select your domain to open its Domain Settings page, then select DNS to see its records.
  3. Select Add New Record and choose CNAME from the Type menu.
  4. Type selector1._domainkey in Name. Leave your domain name out: it is added for you.
  5. Paste the first value Microsoft shows in Value, exactly as copied.
  6. Select Save.
  7. Add the second record the same way, named selector2._domainkey, with the second value.

In our words, from GoDaddy: adding a CNAME record, read 14 October 2026. If a screen has changed since, follow the host's own page.

04

How do I turn signing on?

Go back to the DKIM tab in the Defender portal, select your domain, and set Sign messages for this domain with DKIM signatures to Enabled. If the portal says the records are missing, wait for your DNS change to be seen and try again.

Sources

Where does this come from?

DMARC at GoDaddy for Microsoft 365SPF at GoDaddy for Microsoft 365DKIM at GoDaddy for Google WorkspaceEvery DNS host and record
06 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy