Have 2 Domains, confused about DMARC and DKIM records

[Riscbox]

This was all set up before I started working at this company, which is different from how I would have set it up. With that said, here is my situation:

1. Main company domain has a .net address - email uses this domain.

2. Shopify domain is a .com address - email from .net flows through here for eCommerce.

3. GoDaddy has our .net domain, but .com is handled by Shopify (we don't have Cloudflare access.)

4. I've set up DMARC in our .net domain, which now shows as being set up (for the .net domain).

5. Online checkers don't see DKIM as being set up.

Going through all of the online posts on how to set up DMARC and/or DKIM - none of those show our particular "situation." I feel like I need to set up additional DKIM records to include the .com address, but I don't want to mess up traffic to our .net domain.

Does anyone have a good idea of how to set this up correctly?

[Elias]

Hey, @Riscbox.

Thank you for reaching out and posting this question!

I understand that you have two custom domains, and there's some confusion about the DMARC and DKIM records. To clarify, you're essentially adding Shopify's DMARC and CNAME records to your domain so that you can connect to the Shopify Sender Policy Framework (SPF) and Domain Keys Identified Mail (DKIM) records. These records are to ensure that your store's email messages can be delivered to your customers and not flagged as spam.

Since it looks like you may have two different domain providers, then you'll need to add the DMARC and CNAME records to both of your domains. If you'd like to learn more about the process, then we've got a step-by-step guide on that here: Setting up your email and Authenticate your third-party domain. That being said, if one of the domains was purchased from Shopify, then the records should be automatically setup for that domain. However, you do need to add the records to the GoDaddy domain. If you need any assistance with this, then this is something that GoDaddy's Support team can help you with as well.

Once the records have been added, it may take up to 48 hours for the DKIM to complete the set up. However, if you're still not detecting the DKIM record after 48 hours, then it looks like we'll need to access your account in order to get a closer look at your domains. While we're unable to provide account-specific support via the Shopify Community, we'd be happy to continue assisting you through live chats. Simply visit the Shopify Help Center and login to your account to create a support request.

If you have any other questions on this topic, then don't hesitate to let me know!

[Riscbox]

Hi Elias,

All of the instructions treat my Shopify domain as the "third-party" domain, whereas we bought that domain from Shopify. "...if one of the domains was purchased from Shopify, then the records should be automatically set up for that domain..." If that was so, I don't think I should be getting results that read, "...for your .net domain/email initiator, you have Valid DMARC records, but no DMARC has been found for your sub-domain..."

Is there something I'm missing here? I'm more than happy to give you my URLs and have you look for yourself. I have control to add DMARC/DKIM/etc to my .net domain, but not to the .com domain, which is where our Shopify store lives.

[Elias]

Hi, @Riscbox.

Thank you for following up with the additional context.

It sounds like both of your domains are from a third-party if that's what your Shopify admin is indicating. However, while we're unable to access merchant accounts via the Shopify Community as mentioned, we'd be happy to continue assisting you through live chats. Please visit the Shopify Help Center and login to your account to create a support request.

Feel free to keep me posted!

[onescales]

while you should setup on both, for shopify purpose you should setup on the domain that is in the from email you're sending emails from