# SPF record for ActiveCampaign

URL: https://iblockspam.com/spf/activecampaign
Last updated: 2026-10-22

Include: None needed (Mailserver Domain CNAME)
Where it goes: Not needed (Mailserver Domain CNAME)
DNS lookups: depends on your account

You don't need to create or edit an SPF record for ActiveCampaign. Setting up a sending domain includes a Mailserver Domain: a CNAME that points a subdomain of yours to ActiveCampaign, so it can use your domain as the return path and serve the SPF record for you. ActiveCampaign says SPF is then fully covered, and aligned with your From domain.

## Example records

- Your main domain on Microsoft 365 stays as it is (TXT, host @): `v=spf1 include:spf.protection.outlook.com -all`
- Your main domain on Google Workspace stays as it is (TXT, host @): `v=spf1 include:_spf.google.com ~all`

## Notes

- ActiveCampaign says records usually propagate in 5 to 10 minutes and can take up to 24 hours, longer for a newly bought domain.
- For accounts under 5,000 contacts, ActiveCampaign is gradually replacing the From address on unauthenticated domains with a generic one on its shared domain.
- If you do add something to your SPF record for other services, keep a single record: ActiveCampaign notes you can only have one.

## How to add it

- In ActiveCampaign, click Settings (the gear icon), then Advanced, and find the Sending Domain section.
- Choose Configure Domain to let ActiveCampaign add the records through your DNS provider's login, or Set up manually to verify the domain by email and copy the records yourself.
- For manual setup, add each record in the table as the type shown (CNAME or TXT), including the Mailserver Domain CNAME and the DKIM CNAMEs. ActiveCampaign suggests a TTL of 300 seconds if your DNS host has no default.
- Leave your root SPF record alone, then use Recheck Authentication until the domain shows Authenticated.

## DKIM and DMARC

The same sending-domain setup publishes ActiveCampaign's DKIM records, two CNAMEs under the selectors `acdkim1` and `acdkim2` (see our [ActiveCampaign DKIM page](https://iblockspam.com/dkim/activecampaign)), and a basic DMARC record. ActiveCampaign says a `quarantine` or `reject` DMARC policy needs DKIM set up first, or its mail fails DMARC.

## Common mistakes

- Adding a guessed ActiveCampaign include to your SPF record. The Mailserver Domain CNAME already covers SPF on the return path.
- Mixing up the Mailserver Domain with the custom link-tracking domain. ActiveCampaign calls them different features with two different CNAMEs.
- Moving DMARC to `p=quarantine` before the DKIM CNAMEs are authenticated.

**Q: Do I need an SPF include for ActiveCampaign?**
No. ActiveCampaign says that once the Mailserver Domain from its sending-domain setup is in place, SPF is fully covered and you don't need to create or modify an SPF record. Receivers check SPF on that return-path subdomain.

**Q: What is ActiveCampaign's Mailserver Domain?**
A CNAME on a subdomain of yours, such as `acmail.bobscompany.com` in ActiveCampaign's example, that points to ActiveCampaign. It becomes the Return-Path (bounce) domain, so SPF passes and aligns with your From domain under DMARC's relaxed alignment.

**Q: Why does ActiveCampaign mail show a different mailed-by domain?**
Without a Mailserver Domain, ActiveCampaign uses its own domain, such as `acems1.com`, as the return path. SPF still passes there but doesn't align with your From address. Set up the sending domain to fix it, and DKIM to cover DMARC.

Sources:
- ActiveCampaign Help: SPF, DKIM, and DMARC authentication: https://help.activecampaign.com/hc/en-us/articles/206903370-SPF-DKIM-and-DMARC-Authentication
- ActiveCampaign Help: Set up your sending domain: https://help.activecampaign.com/hc/en-us/articles/360015584680-Set-up-your-sending-domain
- ActiveCampaign Help: Domains and domain alignment: https://help.activecampaign.com/hc/en-us/articles/360014290939-Domains-and-domain-alignment

---

Source: iBlockSpam, https://iblockspam.com/spf/activecampaign (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt