Campaign Monitor SPF Record Configuration<\/strong><\/h2>\n\n\n\nAs you probably know, SPF helps protect your domain against spoofing and prevent your outgoing messages from being marked as spam by receiving servers. SPF specifies the mail servers that are allowed to send emails from your domain. Receiving mail servers use SPF to verify that incoming messages that appear to come from your domain were indeed sent by you.<\/p>\n\n\n\n
Campaign Monitor SPF record<\/strong> setup has a little nuance, though. As Campaign Monitor always handles your Return-Path domain<\/a>, SPF alignment is not possible for this service. While sometimes, you\u2019ll be suggested to add \u201cinclude:_spf.createsend.com\u201d<\/em> to your SPF record, you won\u2019t result in achieving alignment. Instead, you\u2019ll just whitelist the IP addresses of Campaign Monitor, simply wasting precious DNS lookups<\/a>.
In case you add the include provided from Campaign Monitor\u00a0 in your SPF record, your SPF record will look like the one below,
v=spf1 include:zoho.com include:mxsspf.sendpulse.com include:_spf.createsend.com<\/em> <\/strong>~all
Just be informed that there is no need to do this, as SPF will fail due to misalignment, even if you add that \u201cinclude\u201d in your SPF record.\u00a0 However, with SPF missing, you can still achieve DMARC compliance by configuring the Campaign Monitor DKIM<\/strong> record.<\/p>\n\n\n\n\n\nDKIM for Campaign Monitor<\/strong><\/h2>\n<\/div>\n<\/div>\n\n\n\nFor DKIM to function, you must have two keys, a private key and a public key.
– Private key is used to create the signature on all outgoing messages.<\/p>\n\n\n\n
– Public key is used to determine if the signature on a message is valid or not.<\/p>\n\n\n\n
If you\u2019re using third-party ESPs (Campaign Monitor, Microsoft365, etc.) DKIM public keys are obtained from their portals. ESPs won\u2019t share their Private Keys for privacy and security concerns.<\/p>\n\n\n\n
DKIM protects the data of the email message. This is done by giving the email a digital signature. If the DKIM is valid, it means that the message body and attachments have not been modified. <\/p>\n\n\n\n
Campaign Monitor DKIM Record Setup<\/strong><\/h2>\n\n\n\nCampaign Monitor DKIM<\/strong> record configuration is as easy as following a few steps. We have all explained below.
Step 1:<\/strong> In Campaign Monitor, click your profile image at the top right, then click Account settings.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.13.48-1024x262.png\")
<\/figure>\n\n\n\nStep 2:<\/strong> Click Sending Domains.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.14.35-1-1024x568.png\")
<\/figure>\n\n\n\n
Step 3:<\/strong> Find the \u201cAdd domain\u201d button near \u201cManage your sending domains\u201d and click it.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.15.12-1024x194.png\")
<\/figure>\n\n\n\nStep 4:<\/strong> Enter a fully qualified domain name in the Domain field. We\u2019ve added \u201ceasydmarc.com\u201d<\/em> for demonstration purposes.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.16.05-1024x991.png\")
<\/figure>\n\n\n\nStep 5:<\/strong> Once you add your domain, the system will provide you with a TXT record. Add it to your DNS. Here is how to do it.<\/p>\n\n\n\nHow to Add the Provided TXT Record in Your DNS?<\/strong><\/h2>\n\n\n\nStep 1:<\/strong> Head to your DNS, create a new DNS record, and set the type to TXT.<\/p>\n\n\n\nStep 2:<\/strong> Copy the Name\/host field to paste into the corresponding field in your DNS. For the TXT name\/host, what you enter depends on your DNS host. Some require you to enter the full cm._domainkey.yourdomain.com, others only need the cm._domainkey part. In case you need specific instructions, we have a number of articles on how to add DMARC to the most popular DNS providers<\/a>.<\/p>\n\n\n\nStep 3:<\/strong> Otherwise, simply copy and paste the TXT record in the Value box into the appropriate field in your DNS.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.16.36-1024x247.png\")
<\/figure>\n\n\n\nStep 4:<\/strong> Go back into Campaign Monitor and click \u201cAuthenticate now\u201d at the bottom of the screen.<\/p>\n\n\n\nYou will see a confirmation message once the domain has been successfully authenticated. The status of the domain will also change to \u201cauthenticated\u201d, as shown in the screenshot below.<\/p>\n\n\n\n
Congratulations, you\u2019ve successfully applied DKIM to Campaign Monitor.<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/07\/screenshot-1-1-1024x239.png\")
<\/figure>\n\n\n\nFinal Thoughts<\/strong><\/h2>\n\n\n\nCampaign Monitor email authentication<\/strong> setup is one of those cases when DMARC compliance is achieved via DKIM authentication and alignment only. Although you\u2019ve not configured SPF, DMARC will still pass. (See the screenshot below)<\/p>\n\n\n\n![\"\"](\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2023\/06\/Screenshot-2022-10-04-at-16.17.00-3-1024x435.png\")
<\/figure>\n\n\n\nImportant note:<\/strong> If the provider recommends publishing also a DMARC record, there\u2019s no need to do so if you already have a DMARC record in place, as each domain can only have one DMARC record.<\/p>\n\n\n\nCongratulations, you now successfully authenticated your outgoing mail stream from Campaign Monitor <\/em>with DKIM.<\/p>\n\n\n\n\n
In case you add the include provided from Campaign Monitor\u00a0 in your SPF record, your SPF record will look like the one below,
v=spf1 include:zoho.com include:mxsspf.sendpulse.com include:_spf.createsend.com<\/em> <\/strong>~all
Just be informed that there is no need to do this, as SPF will fail due to misalignment, even if you add that \u201cinclude\u201d in your SPF record.\u00a0 However, with SPF missing, you can still achieve DMARC compliance by configuring the Campaign Monitor DKIM<\/strong> record.<\/p>\n\n\n\n
DKIM for Campaign Monitor<\/strong><\/h2>\n<\/div>\n<\/div>\n\n\n\nFor DKIM to function, you must have two keys, a private key and a public key.
– Private key is used to create the signature on all outgoing messages.<\/p>\n\n\n\n
– Public key is used to determine if the signature on a message is valid or not.<\/p>\n\n\n\n
If you\u2019re using third-party ESPs (Campaign Monitor, Microsoft365, etc.) DKIM public keys are obtained from their portals. ESPs won\u2019t share their Private Keys for privacy and security concerns.<\/p>\n\n\n\n
DKIM protects the data of the email message. This is done by giving the email a digital signature. If the DKIM is valid, it means that the message body and attachments have not been modified. <\/p>\n\n\n\n
Campaign Monitor DKIM Record Setup<\/strong><\/h2>\n\n\n\nCampaign Monitor DKIM<\/strong> record configuration is as easy as following a few steps. We have all explained below.
Step 1:<\/strong> In Campaign Monitor, click your profile image at the top right, then click Account settings.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 2:<\/strong> Click Sending Domains.<\/p>\n\n\n\n<\/figure>\n\n\n\n
Step 3:<\/strong> Find the \u201cAdd domain\u201d button near \u201cManage your sending domains\u201d and click it.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 4:<\/strong> Enter a fully qualified domain name in the Domain field. We\u2019ve added \u201ceasydmarc.com\u201d<\/em> for demonstration purposes.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 5:<\/strong> Once you add your domain, the system will provide you with a TXT record. Add it to your DNS. Here is how to do it.<\/p>\n\n\n\nHow to Add the Provided TXT Record in Your DNS?<\/strong><\/h2>\n\n\n\nStep 1:<\/strong> Head to your DNS, create a new DNS record, and set the type to TXT.<\/p>\n\n\n\nStep 2:<\/strong> Copy the Name\/host field to paste into the corresponding field in your DNS. For the TXT name\/host, what you enter depends on your DNS host. Some require you to enter the full cm._domainkey.yourdomain.com, others only need the cm._domainkey part. In case you need specific instructions, we have a number of articles on how to add DMARC to the most popular DNS providers<\/a>.<\/p>\n\n\n\nStep 3:<\/strong> Otherwise, simply copy and paste the TXT record in the Value box into the appropriate field in your DNS.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 4:<\/strong> Go back into Campaign Monitor and click \u201cAuthenticate now\u201d at the bottom of the screen.<\/p>\n\n\n\nYou will see a confirmation message once the domain has been successfully authenticated. The status of the domain will also change to \u201cauthenticated\u201d, as shown in the screenshot below.<\/p>\n\n\n\n
Congratulations, you\u2019ve successfully applied DKIM to Campaign Monitor.<\/p>\n\n\n\n<\/figure>\n\n\n\nFinal Thoughts<\/strong><\/h2>\n\n\n\nCampaign Monitor email authentication<\/strong> setup is one of those cases when DMARC compliance is achieved via DKIM authentication and alignment only. Although you\u2019ve not configured SPF, DMARC will still pass. (See the screenshot below)<\/p>\n\n\n\n<\/figure>\n\n\n\nImportant note:<\/strong> If the provider recommends publishing also a DMARC record, there\u2019s no need to do so if you already have a DMARC record in place, as each domain can only have one DMARC record.<\/p>\n\n\n\nCongratulations, you now successfully authenticated your outgoing mail stream from Campaign Monitor <\/em>with DKIM.<\/p>\n\n\n\n\n
– Private key is used to create the signature on all outgoing messages.<\/p>\n\n\n\n
Campaign Monitor DKIM<\/strong> record configuration is as easy as following a few steps. We have all explained below. Step 2:<\/strong> Click Sending Domains.<\/p>\n\n\n\n Step 4:<\/strong> Enter a fully qualified domain name in the Domain field. We\u2019ve added \u201ceasydmarc.com\u201d<\/em> for demonstration purposes.<\/p>\n\n\n\n Step 5:<\/strong> Once you add your domain, the system will provide you with a TXT record. Add it to your DNS. Here is how to do it.<\/p>\n\n\n\n Step 1:<\/strong> Head to your DNS, create a new DNS record, and set the type to TXT.<\/p>\n\n\n\n Step 2:<\/strong> Copy the Name\/host field to paste into the corresponding field in your DNS. For the TXT name\/host, what you enter depends on your DNS host. Some require you to enter the full cm._domainkey.yourdomain.com, others only need the cm._domainkey part. In case you need specific instructions, we have a number of articles on how to add DMARC to the most popular DNS providers<\/a>.<\/p>\n\n\n\n Step 3:<\/strong> Otherwise, simply copy and paste the TXT record in the Value box into the appropriate field in your DNS.<\/p>\n\n\n\n Step 4:<\/strong> Go back into Campaign Monitor and click \u201cAuthenticate now\u201d at the bottom of the screen.<\/p>\n\n\n\n You will see a confirmation message once the domain has been successfully authenticated. The status of the domain will also change to \u201cauthenticated\u201d, as shown in the screenshot below.<\/p>\n\n\n\n Congratulations, you\u2019ve successfully applied DKIM to Campaign Monitor.<\/p>\n\n\n\n Campaign Monitor email authentication<\/strong> setup is one of those cases when DMARC compliance is achieved via DKIM authentication and alignment only. Although you\u2019ve not configured SPF, DMARC will still pass. (See the screenshot below)<\/p>\n\n\n\n Important note:<\/strong> If the provider recommends publishing also a DMARC record, there\u2019s no need to do so if you already have a DMARC record in place, as each domain can only have one DMARC record.<\/p>\n\n\n\n Congratulations, you now successfully authenticated your outgoing mail stream from Campaign Monitor <\/em>with DKIM.<\/p>\n\n\n\n
Step 1:<\/strong> In Campaign Monitor, click your profile image at the top right, then click Account settings.<\/p>\n\n\n\n<\/figure>\n\n\n\n<\/figure>\n\n\n\n
Step 3:<\/strong> Find the \u201cAdd domain\u201d button near \u201cManage your sending domains\u201d and click it.<\/p>\n\n\n\n<\/figure>\n\n\n\n<\/figure>\n\n\n\nHow to Add the Provided TXT Record in Your DNS?<\/strong><\/h2>\n\n\n\n
<\/figure>\n\n\n\n<\/figure>\n\n\n\nFinal Thoughts<\/strong><\/h2>\n\n\n\n
<\/figure>\n\n\n\n