On this page

Fixing DKIM in GoDaddy for Google Workspace

What this fixes

DKIM lets receiving servers verify your mail hasn't been altered in transit and really came from you. See Fixing DKIM Record Issues for what it does and why it matters. For Google Workspace, the DKIM record is a TXT record — the key itself has to be generated in the Google Admin console first, then published to DNS.

This assumes GoDaddy is managing your DNS (not just registration with DNS hosted elsewhere).

Step 1: Generate the key in Google Workspace

  1. Go to Menu → Apps → Google Workspace → Gmail in the Admin console.
  2. Click Authenticate email, and select your domain.
  3. Click Generate New Record.
  4. Choose 2048-bit key length (recommended).
  5. Click Generate. Google shows you a TXT record name (default selector google, giving a host of google._domainkey) and a value (the public key).

Step 2: Publish it in GoDaddy

  1. Log in to your GoDaddy account and go to your Domain Portfolio.
  2. Select your domain to open Domain Settings, then click the DNS tab.
  3. Under Records, click Add.
  4. Set Type to TXT.
  5. Name/Host: google._domainkey
  6. Value: paste the full value Google gave you.
  7. Leave TTL at the default.
  8. Click Save.

Step 3: Turn on DKIM signing

  1. Back in the Google Admin console, wait a few minutes for DNS to propagate.
  2. Return to Authenticate email for the domain and click Start Authentication.
  3. Re-run your scan to confirm.

Common pitfalls

  • Publishing the DNS record but forgetting to click Start Authentication in Google.
  • Truncated TXT values — Google's 2048-bit key is long; GoDaddy's record editor can silently cut off long strings, so double-check the full value saved.