MailFixIt

GoDaddy Email email configuration guide

GoDaddy Professional Email: DKIM record is invalid

Professional Email normally delegates DKIM through two CNAME records. A wrong host or target prevents GoDaddy's current key from being found.

Problem description

A provider configuration symptom may look like:

Invalid DKIM public key after a provider configuration change.

Check the exact CNAMEs

Copy both DKIM host names and targets from the domain’s Email and Office Dashboard. Do not test a guessed selector or treat the provider’s target as a TXT key.

Evidence to collect

  1. Confirm that both records are CNAMEs.
  2. Check that the DNS UI did not append the domain twice.
  3. Remove a conflicting TXT or CNAME at the same selector only after confirming it is obsolete.
  4. Compare the final public target with GoDaddy’s value.

Safe correction sequence

Correct the mismatched record, wait until both CNAMEs resolve publicly, and send a new message. Its headers should show dkim=pass; DNS alone cannot prove that GoDaddy signed the message.

MailFixIt boundary

MailFixIt can inspect an exact selector. It cannot read private account values or enable signing.

Frequently asked questions

What does MailFixIt check for GoDaddy Email?

It helps compare public DNS evidence with the provider setup path. It does not access the provider account or claim that a DNS result alone proves sending or receiving.

Should I replace all existing DNS records with provider values?

No. Confirm the exact record owner and type, preserve unrelated legitimate services, and change only the record required for the intended mail route.

Related email diagnostics

Email delivery delayed or rejected after a DNS migrationDiagnose email that stopped arriving after a DNS change. Compare public MX records with the intended provider and avoid false alarms for mail gateways. SPF is not configured for the envelope sender domainDiagnose SPF missing on a bounce or MAIL FROM subdomain. Check the exact envelope domain, add only authorized senders, and verify safely. DKIM public key record is invalid or revokedDiagnose an invalid or revoked DKIM public key record. Check the exact DKIM selector in public DNS before replacing a sender-provided key. DMARC policy for the visible From subdomain is unexpectedFind the effective DMARC policy for a visible From subdomain. See whether p, sp, np or test mode applies before changing DMARC DNS.

Primary sources: GoDaddy: Add SPF, DKIM and DMARC to Professional Email.