It may be beneficial to implement DKIM signing on your account. DKIM is a form of email authentication that allows an organization to claim responsibility for a message in a way that the recipient can validate.
DKIM will help prevent spoofing and phishing of your domain, and an added benefit is that it allows Mailbox Providers such as Gmail, Microsoft, and Oath (Yahoo, AOL, Verizon) to track the email reputation of your sending domain.
If the reputation of your sending domain is stronger than the reputation of the sending IPs, Mailbox Providers may default to your sending domain reputation, which could improve your email performance.
Learn more about SPF, DKIM, and DMARC authentication.
We have updated our DKIM process from TXT records to CNAME records. If you set up your
DKIM before February 23, 2023, your TXT records will still work and remain valid.
However, we recommend setting up your DKIM with the following CNAME records
instructions since it is more secure.
- Log in to your account, click Settings on the left menu, then click Advanced.
- Click the "I will manage my own email authentication" option.
- We will generate two CNAME records. Please set up both CNAME records in the DNS provider for your domain. This process will vary slightly based on your DNS provider, but you can find instructions for GoDaddy here.
- Once you have set up both CNAME records in your DNS provider, return to your account and go to Settings > Advanced. Then, click "Check DNS" to verify that you have set up your DNS records correctly. Learn how to troubleshoot error messages.
- After correctly setting up your DNS records for all your From address domains, click "Save Settings" at the top.
- Sending emails from several domains requires setting up each domain with the proper DNS records for DKIM.
Additional Notes
Typically, the DNS record will propagate in 5 to 10 minutes, but in some rare cases, it can take up to 24 hours. To view the status of your DKIM record, use the DKIM, SPF, DMARC DNS verification tool.
Since Gmail represents > 60% of an average contact list, setting up Google Postmaster Tools may also be beneficial. Google Postmaster Tools provides information regarding the reputation of your domain at Gmail. It is free to use, but you must have DKIM implemented first.
Read the "Check your domain reputation with Google Postmaster" help article to learn more about Google Postmaster Tools.
Troubleshooting DKIM error messages
Below is a list of possible messages you can get while setting up DKIM and suggestions to correct them:
- “Your domain is set up with DKIM with the legacy TXT record at dk._domainkey.activecampaign.com. This method will work, but we recommend that you set up CNAME records instead, which are more secure.”
As of February 23, 2032, we updated DKIM from a TXT record to a CNAME record. This error message will appear if you have set up DKIM before February 23, 2023 with a TXT record. This connection will still work, but it is recommended to update with the CNAME record as it is more secure.
- “Please enter a valid domain name (e.g.mydomain.com) to generate your DNS record.”
The domain name entered is not valid. Please confirm your domain URL and check for any typos.
- “Your DNS records are not set up correctly.”
This message means the DNS records are incorrectly set up with your DNS provider. Check your DNS records for typos or errors. Be sure that you are editing DNS in the correct place. For example, a domain can be registered in Godaddy, but the DNS is managed in Cloudflare. If this does not help, please reach out to your DNS provider to work through any troubleshooting and setting up CNAME records.
- “Only one of your CNAME records is set up. Please check your DNS records for typos.”
This message means that one of the DNS records is not set up correctly with your DNS provider. Ensure you have both account-generated CNAME records in your DNS provider. Check your DNS records for typos or errors if both are set up. If this does not help, please reach out to your DNS provider to work through any troubleshooting and setting up CNAME records.