# DKIM record for ActiveCampaign URL: https://iblockspam.com/dkim/activecampaign Last updated: 2026-10-22 Record type: CNAME Selectors: acdkim1, acdkim2 Key managed by: Provider (CNAME delegation) ActiveCampaign signs your mail through two CNAME records under the selectors `acdkim1` and `acdkim2`, for example `acdkim1._domainkey` on your domain. You add them while setting up a sending domain under Settings, Advanced. DKIM set up with CNAMEs uses a 2048-bit key; older setups with a TXT record keep a legacy 1024-bit key until you switch. ## DNS records - DKIM selector acdkim1 (CNAME, host acdkim1._domainkey): `` - DKIM selector acdkim2 (CNAME, host acdkim2._domainkey): `` ActiveCampaign checks for both; with only one, it reports that only one of your CNAME records is set up. ## Set it up and turn on signing - Click **Settings** (gear icon), then **Advanced**, and go to the **Sending Domain** section. - Choose **Configure Domain** if your DNS provider is on ActiveCampaign's supported list; it signs in to the provider and adds every record for you. - Otherwise choose **Set up manually**: enter the domain, confirm the verification email (the link expires after seven days), then click **Set up DNS records**. - Add each row as the type shown. Enter the Name as `acdkim1._domainkey` if your DNS host appends the domain, or the full name if it doesn't. - Use **Recheck Authentication** until the status reads **Authenticated**. If records are wrong, **Resolve Issues** reopens the Configure Domain flow. ## DMARC alignment By default ActiveCampaign signs with one of its own domains, such as `acems1.com`, which passes DKIM but doesn't align with your From address and shows a "via" note in Gmail. After the sending domain is authenticated, the signature uses the domain in your From address, so DMARC can pass on DKIM, and the Mailserver Domain aligns SPF too. ActiveCampaign warns that some senders see inbox placement dip after switching, because providers re-learn the domain. ## Key length and rotation The CNAMEs delegate the key to ActiveCampaign, which says it uses a 2048-bit key for every customer who set up DKIM with CNAME records. Accounts that still have the legacy TXT record keep a 1024-bit key and get a message recommending the CNAME method; **Check DNS** in Advanced Settings shows the records to add. ActiveCampaign doesn't publish a rotation schedule. A custom DKIM key is possible only through a support ticket. ## Common mistakes - **One CNAME only.** Both `acdkim1` and `acdkim2` must resolve before the domain authenticates. - **A typo in the domain field.** ActiveCampaign rejects capitals, `www`, paths, `https://` and full email addresses; enter `mydomain.com`. - **Editing DNS at the registrar when another provider hosts it.** ActiveCampaign's example: a domain registered at GoDaddy but with DNS at Cloudflare. - **Staying on the legacy TXT key.** It still works, but ActiveCampaign recommends moving to the CNAMEs. **Q: What are ActiveCampaign's DKIM selectors?** `acdkim1` and `acdkim2`. ActiveCampaign gives these when you check DKIM with an outside tool, and the records sit at `acdkim1._domainkey` and `acdkim2._domainkey` on your sending domain, as CNAMEs. **Q: Does ActiveCampaign use a 1024-bit or 2048-bit DKIM key?** 2048-bit for every account that set up DKIM with CNAME records. Accounts still on the older TXT record use a 1024-bit key; switching to the CNAME method moves them to 2048 bits. **Q: Why did my open rates drop after turning on ActiveCampaign DKIM?** ActiveCampaign says signing with your own domain makes you look like a new sender, so mailbox providers re-learn your reputation. It suggests watching Google Postmaster Tools and sending only to recently engaged contacts for a while. Sources: - ActiveCampaign Help: Set up your sending domain: https://help.activecampaign.com/hc/en-us/articles/360015584680-Set-up-your-sending-domain - ActiveCampaign Help: Request a 2048 DKIM key: https://help.activecampaign.com/hc/en-us/articles/5955643910300-Request-a-2048-DKIM-key - ActiveCampaign Help: Troubleshooting issues with domain authentication: https://help.activecampaign.com/hc/en-us/articles/12372243669404-Troubleshooting-issues-with-domain-authentication - ActiveCampaign Help: Why do my open rates drop when I turn on DKIM?: https://help.activecampaign.com/hc/en-us/articles/12830872342556-Why-do-my-open-rates-drop-when-I-turn-on-DKIM - ActiveCampaign Help: Domains and domain alignment: https://help.activecampaign.com/hc/en-us/articles/360014290939-Domains-and-domain-alignment --- Source: iBlockSpam, https://iblockspam.com/dkim/activecampaign (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt