DKIM record for Constant Contact

The DNS records

Copy every name and value from Advanced settings. Constant Contact's troubleshooting article gives the CNAME targets as 100._domainkey.dkim1.ccsend.com and 200._domainkey.dkim2.ccsend.com; check them against your account.

CNAME method: first record

Type: CNAME · Host: ctct1._domainkey Copy

<Value shown in Constant Contact>

CNAME method: second record

Type: CNAME · Host: ctct2._domainkey Copy

<Value shown in Constant Contact>

TXT method: generated key

Type: TXT · Host: 2020223150._domainkey Copy

k=rsa; p=<public key shown after you click Generate key>

The selector is Constant Contact's example; yours is shown when you click Generate key.

DMARC policy

Type: TXT · Host: _dmarc Copy

<DMARC value shown in Constant Contact>

If your domain already has a DMARC record, keep one record rather than adding a second.

Set it up and turn on signing

1. Click your profile name in the upper right, choose Settings, then open the Advanced settings tab.
2. Click Add self-authentication, select Self-authenticate using DKIM CNAME records, click Continue, choose the domain and click Continue again.
3. Use the copy icons to copy each CNAME and DMARC name and value into your DNS host. Enter ctct1._domainkey without your domain if the host appends it.
4. Wait: Constant Contact says propagation can take up to 48 hours. Then click Check status, and when the domain is ready, Activate.

DMARC alignment

Self-authentication is what lets Constant Contact sign campaigns with your domain, so DKIM can align with your From address under DMARC. Constant Contact stresses that the DKIM key works independently of DMARC: publishing the DMARC record doesn't create the key, and the key doesn't set a policy. Both have to be in place and activated.

Key length and rotation

With the CNAME method the keys sit on ccsend.com names that Constant Contact controls, so a key change needs no DNS edit from you. With the TXT method the public key lives in your zone, so a new key means a new record. Constant Contact doesn't document a key length or rotation schedule in these articles.

Common mistakes

• "Host name was not found". The record is missing or its name doesn't match. Check for a doubled domain.
• "Please enter correct value for host name". The name is right but the value differs from what Constant Contact gave you.
• Case changes in the DMARC record. Constant Contact says DMARC record information is case-sensitive.
• Activating too early. Allow 24 to 48 hours before troubleshooting errors.