Emails from M365 email accounts lands in spam or Junk of Gmail/yahoo folders, suggest

Question

Emails from M365 email accounts lands in spam or Junk of Gmail/yahoo folders, suggest, DKIM and DMARC already, setup but somehow DKIM is not updating on Godaddy. Need steps to resolve this anyone

Answer 1

Hi @RaGau

Thank you for posting your question in Microsoft Q&A. 

We understand that your M365 your Microsoft 365 emails are landing in Gmail/Yahoo spam/junk folders and it shown your DKIM misconfiguration. As my research, Microsoft 365 uses a special DKIM setup with two CNAME records (not the traditional TXT record). If these CNAME records are not added exactly as provided in your Microsoft 365 DKIM settings, or if you enable DKIM before the CNAMEs exist, the configuration fails silently and does not update.

You could try to follow these steps to troubleshoot it: 

Log in to the Microsoft Defender portal.

Go to Policies and rules -> Threat policies -> DKIM (under Email authentication settings)  

Or direct link: DomainKeys Identified Mail (DKIM) - Microsoft Defender  

Select your domain and click Create DKIM keys (or if it says keys already exist, just note the two CNAME records shown). You will see two CNAME records, for example: 

Host: selector1._domainkey → Points to: selector1-domain-com._domainkey.domain.onmicrosoft.com 

Host: selector2._domainkey → Points to: selector2-domain-com._domainkey.contoso.onmicrosoft.com  

The exact values are unique to your tenant ,copy them exactly. 

Then, add these exact CNAME records in GoDaddy DNS. 

Go back to the Microsoft Defender DKIM page and toggle Enable (turn on "Sign messages for this domain with DKIM signatures"). If it immediately says "CNAME doesn't exist" or any issues, please wait 5–60 minutes and try again.  

Note: 

DNS changes can take 1–48 hours globally. 

Verify the records using a DNS lookup tool before retrying.  

Then you could try  to send mail again. 

After enabling DKIM, send a test email. In Gmail/Yahoo, open the message details and confirm DKIM passes for your domain. 

I hope this helps. 

Please understand that our initial reply may not always immediately resolve the issue. However, with your help and more detailed information, we can work together to find a solution.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".      

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

If emails from Microsoft 365 accounts are landing in the spam or junk folders of Gmail or Yahoo, there are several steps you can take to address this issue, especially since you mentioned that DKIM and DMARC are already set up but DKIM is not updating on GoDaddy:

1. Verify DKIM Setup: Ensure that your DKIM records are correctly configured in GoDaddy. You may need to check if the public key is correctly published in the DNS settings. If DKIM is not updating, try re-adding the DKIM record or contacting GoDaddy support for assistance.
2. Check SPF Record: Make sure your SPF record is correctly set up and includes all necessary IP addresses and domains that send emails on behalf of your domain. This helps prevent your emails from being marked as spam.
3. Monitor DMARC Reports: Use DMARC aggregate reports to monitor how your emails are being treated by recipient servers. This can help identify if there are issues with DKIM or SPF alignment that need to be addressed.
4. Improve Email Content: Sometimes, the content of your emails can trigger spam filters. Ensure that your emails do not contain spammy keywords, excessive links, or attachments that could be flagged.
5. Authenticate Your Domain: Ensure that your domain is fully authenticated. This includes having valid DKIM, SPF, and DMARC records. If any of these are misconfigured, it can lead to emails being marked as spam.
6. Engage with Recipients: Encourage recipients to add your email address to their contacts or whitelist your domain. This can help improve deliverability.
7. Check for Blacklisting: Verify if your sending IP address or domain is blacklisted. If it is, you may need to take steps to delist it.
8. Consult Documentation: Refer to Microsoft's documentation on email authentication and troubleshooting to ensure all settings are correctly configured.

By following these steps, you should be able to improve the deliverability of your emails and reduce the chances of them landing in spam or junk folders.

---

References:

• Email authentication failure scenarios
• Set up DMARC to validate the From address domain for cloud senders

Answer 3

thank you for the update, i will test it and update soon, if required