Understanding ActiveCampaign Email Authentication
ActiveCampaign requires custom domain authentication to satisfy Gmail and Yahoo 2024 deliverability standards.
When ActiveCampaign delivers outbound emails on your behalf, recipient mail transfer agents (MTAs) at Google, Yahoo, Microsoft, and corporate mail gateways inspect the sender identity. Without a published SPF record explicitly permitting ActiveCampaign's IP ranges, these emails trigger SPF Softfail (~all) or Hardfail (-all), severely degrading domain reputation and inbox placement.
Required DNS Records for ActiveCampaign
Publish the following DNS records in your domain registrar or DNS management console (Cloudflare, AWS Route 53, GoDaddy, Namecheap):
| Type | Host / Name | Value / Target | TTL | Purpose |
|---|---|---|---|---|
| TXT | @ | v=spf1 include:emsd1.com ~all | 3600 | ActiveCampaign SPF. |
Step-by-Step Setup Instructions
In ActiveCampaign > Settings > Advanced > Manage Domains.
Click "Set up SPF/DKIM" and copy the DNS CNAME and TXT values.
Add "include:emsd1.com" to your SPF record.
Verify in ActiveCampaign.
Common ActiveCampaign SPF Configuration Mistakes
× DKIM Not Generated
Cause: Domain not saved in ActiveCampaign.
Fix: Save domain first, then copy keys.
Frequently Asked Questions
What is the SPF include for ActiveCampaign?
Use "include:emsd1.com" or "include:activecampaign.com".