Source guide

Make ActiveCampaign DMARC-compliant

How to authenticate ActiveCampaign as a sender on your domain - so its mail passes SPF, DKIM and DMARC, and you can safely reach enforcement.

Three steps to authenticate ActiveCampaign

ActiveCampaign needs to pass SPF and DKIM, and align with your domain so DMARC passes. Here’s how – confirm the exact values against ActiveCampaign’s current documentation as you go.

Step 1 · SPF

How ActiveCampaign authenticates

Set up the ActiveCampaign 'Mailserver Domain' CNAME, which lets ActiveCampaign serve the SPF record on your behalf - you don't add an include to your own record.

So there’s no SPF include to paste in for ActiveCampaign – DKIM (next step) is what carries DMARC alignment. Hosted SPF still helps keep your overall record under the 10-lookup limit.

No SPF include to add

ActiveCampaign authenticates through the CNAME records you publish during its domain-setup flow – follow Step 2.

Step 2 · DKIM

Turn on DKIM signing

DKIM cryptographically signs each message so receivers can prove it really came from you and wasn’t tampered with. Use ActiveCampaign's sending-domain setup ('Configure Domain' does it automatically, or 'Set up manually' walks you through it) to publish DKIM.

DKIM is what keeps you authenticated even when a message is forwarded – so it’s worth getting right. More on how DKIM works →

  • Enable DKIM inside ActiveCampaign
  • Publish the DNS records it gives you
  • Wait for it to verify, then send a test
Step 3 · DMARC

Confirm alignment, then enforce

With SPF and DKIM set up, check that ActiveCampaign aligns – that the authenticated domain matches your visible From address. Once every legitimate sender aligns, you can move DMARC to p=reject safely.

DMARCER’s enforcement journey shows you exactly when it’s safe to advance – no guesswork.

Good to know

Gmail and Yahoo have required DKIM + DMARC for bulk senders since 2024 - don't skip them.

Check you got it right

Look up your records instantly, or run a full free check to confirm ActiveCampaign passes SPF, DKIM and DMARC – and get your score out of 100.

Check SPF Full free check

More source guides

Google Workspace →

Business email

Microsoft 365 →

Business email

Zoho Mail →

Business email

Free domain check

Check your domain security

See how your domain's security compares to your competitors.