--- title: "How to Set Up SPF and DKIM for Campaign Monitor | DuoCircle" description: "Learn how to set up SPF and DKIM for Campaign Monitor, troubleshoot authentication issues, and improve DMARC alignment and email deliverability for your domain." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/" --- Quick Answer To authenticate Campaign Monitor emails, configure DKIM for your sending domain by adding the DNS record provided by Campaign Monitor. SPF alone may not align with your From domain, so aligned DKIM is important for DMARC compliance and email deliverability. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20to%20Set%20Up%20SPF%20and%20DKIM%20for%20Campaign%20Monitor&url=undefined%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F&title=How%20to%20Set%20Up%20SPF%20and%20DKIM%20for%20Campaign%20Monitor "Share on Reddit") [ ](mailto:?subject=How%20to%20Set%20Up%20SPF%20and%20DKIM%20for%20Campaign%20Monitor&body=Check out this article: undefined%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F "Share via Email") ![Set Up SPF and DKIM](https://media.mailhop.org/duocircle/dmarc-generator-0200-1788421109346.jpg) Email authentication is an important part of maintaining strong [email security](https://www.duocircle.com/) and improving the chances of your marketing **messages reaching recipients**’ inboxes. If your organization uses Campaign Monitor to send newsletters or promotional emails, you should understand how SPF, DKIM, and DMARC interact with your sending domain. _Campaign Monitor sends email on behalf of its customers, which means your domain needs to be properly authenticated_. While SPF configuration has limitations with this particular email service, DKIM can be configured to authenticate your domain and support [DMARC compliance](https://www.duocircle.com/blog/dmarc/a-guide-to-checking-dmarc-compliance/). This guide explains how **Campaign Monitor email authentication** works and walks through the process of setting up DKIM for your sending domain. ## Understanding SPF When Using Campaign Monitor _Sender Policy Framework, commonly known as SPF, is an email authentication method that identifies which servers are permitted to send messages for a domain_. When a receiving mail server receives an email, it can check the domain’s SPF record to determine whether the sending server has authorization. This process can help reduce unauthorized use of a domain and contribute to better [email authentication](https://www.duocircle.com/resources/email-authentication/). However, SPF works differently with some third-party email platforms, including Campaign Monitor. ![Spf Record 4532](https://media.mailhop.org/duocircle/spf-record-4532-1788422447391.jpg) ### Why SPF Alignment May Not Work With Campaign Monitor [Campaign Monitor](https://pangea.app/glossary/campaign-monitor) uses its own Return-Path domain for emails sent through its platform. As a result, the domain authenticated by SPF may differ from the domain shown in the visible From address. When these domains do not align, **SPF authentication** alone will not satisfy DMARC alignment. For DMARC to pass through SPF, both SPF authentication and domain alignment are required. Even if **Campaign Monitor’s sending infrastructure** is included in your SPF record, SPF alignment may still not be achieved. Some users may consider adding the following mechanism to their SPF record: ``` include:_spf.createsend.com ``` For example, an SPF record could contain several authorized email services: ``` v=spf1 include:example-mail-service.com include:another-service.com include:_spf.createsend.com ~all ``` _Although this may authorize certain Campaign Monitor infrastructure for SPF purposes, it does not necessarily provide DMARC alignment for messages sent through the platform_. It can also add another [DNS lookup](https://www.digicert.com/faq/dns/how-does-dns-lookup-work) to your SPF configuration. Since SPF records have a limit on DNS lookups, organizations should avoid adding unnecessary mechanisms. The important point is that Campaign Monitor users can still support DMARC authentication by **configuring DKIM correctly**. ## How DKIM Supports Campaign Monitor Email Authentication DomainKeys Identified Mail, or DKIM, uses [cryptographic signatures](https://medium.com/@alsigitguntoro/cryptographic-signature-for-api-communication-or-data-integrity-46cb9c949347) to help verify the authenticity and integrity of email messages. When an email is sent, the sending system applies a digital signature to the message. The receiving server can then use information published in **DNS to validate that signature**. A DKIM implementation involves two related keys: - **Private key:** Used by the sending platform to create the DKIM signature. - **Public key:** Published in DNS and used by receiving mail servers to verify the signature. When you use an external [email service provider](https://www.activecampaign.com/glossary/email-service-provider), the platform typically manages the private key. Your responsibility is generally to publish the DKIM information supplied by the provider in your domain’s [DNS settings](https://www.ntchosting.com/encyclopedia/dns/settings/). A **successful DKIM check** helps demonstrate that the message was authorized by the signing domain and that protected portions of the message have not been altered during delivery. ![Dkim Validation 0202](https://media.mailhop.org/duocircle/dkim-validation-0202-1788421634704.jpg) ## Setting Up DKIM for Campaign Monitor Campaign Monitor allows users to authenticate their sending domains by adding the required DNS record. Follow the steps below to begin the setup process. ### Step 1: Open Your Account Settings Sign in to your Campaign Monitor account. _Locate your profile or account menu and open the account settings section. This is where you can manage settings related to your organization and sending configuration_. ### Step 2: Go to Your Sending Domain Settings Find the section for managing sending domains. This area allows you to view domains that are already configured and add new domains that you want to use for **authenticated email campaigns**. ### Step 3: Add a New Sending Domain Select the option to add a domain. You will need to enter the domain name that you use in the From addresses for your email campaigns. Make sure you enter the correct domain. For example, if your marketing emails are sent from addresses using `yourcompany.com`, that domain should be added to the sending domain configuration. ![Spf Permerror 6789](https://media.mailhop.org/duocircle/spf-permerror-6789-1788425459582.jpg) ### Step 4: Obtain the DKIM DNS Record After submitting your domain, Campaign Monitor will provide DNS information that must be published before authentication can be completed. The platform will usually provide details such as: - The DNS record type - The host or name - The **required TXT value** Copy this information carefully. Even a small error in the [DNS record](https://www.cloudns.net/wiki/article/9/) can prevent the authentication process from completing successfully. ## Adding the Campaign Monitor DKIM Record to DNS The next part of the process takes place with your DNS hosting provider. ### Step 1: Create a New DNS Record Log in to the service where your domain’s DNS records are managed. Create a new record and select TXT as the record type. ### Step 2: Enter the DKIM Host Name Campaign Monitor will provide the **name or host required** for the DKIM record. Depending on your DNS provider, you may need to enter: `cm._domainkey` or the complete domain-based version of the record name. **DNS management interfaces** do not always handle host names in exactly the same way. Some automatically append your domain name, while others require the full hostname. Review your **DNS provider’s instructions** if you are unsure which format should be used. ### Step 3: Add the TXT Value Copy the DKIM value provided by Campaign Monitor and paste it into the value or content field of your [TXT record](https://www.digicert.com/faq/dns/what-is-a-txt-record). Do not modify the DKIM value unless your DNS provider specifically requires formatting adjustments. Once the information has been entered, save the record. ### Step 4: Wait for DNS Changes to Become Available DNS updates may not appear everywhere immediately. _The time required can vary depending on the DNS provider and existing record settings_. Before continuing, make sure the new TXT record is publicly available and contains the correct information. ### Step 5: Complete Authentication in Campaign Monitor Return to the **Campaign Monitor domain authentication section**. Select the option to verify or authenticate the domain. The system will check your [DNS configuration](https://www.hivelocity.net/kb/dns-configuration-everything-you-need-to-know/) and confirm whether the DKIM record has been published correctly. After successful verification, the domain should show an authenticated status. ## How DKIM Helps With DMARC _DMARC uses SPF and DKIM results to evaluate whether an email message is properly authenticated_. For a message to pass DMARC, either **SPF or DKIM must pass** and align with the domain used in the visible From address. Because SPF alignment can be limited when Campaign Monitor controls the [Return-Path](https://billionverify.com/glossary/return-path) domain, DKIM becomes particularly important. When Campaign Monitor signs messages using a DKIM configuration that aligns with your sending domain, successful DKIM authentication can allow the message to satisfy DMARC requirements even when SPF alignment is unavailable. This makes proper DKIM setup an essential part of **securing email campaigns** sent through the platform. ![Dkim Selector 0201](https://media.mailhop.org/duocircle/dkim-selector-0201-1788421445489.jpg) ## Common Issues During Campaign Monitor DKIM Setup Although the setup process is relatively straightforward, several issues can delay authentication. ### Incorrect Record Type Make sure the record type matches the information **provided by Campaign Monitor**. Using a different DNS record type can cause the authentication check to fail. ### Incorrect Host Name A common problem occurs when the full hostname is entered into a DNS system that automatically adds the domain name. This can create an incorrect record location. Always check how your [DNS provider](https://phoenixnap.com/glossary/what-is-a-dns-provider/) handles host names. ### Missing or Modified DKIM Value The DKIM value should be copied accurately. Missing characters, extra spaces, or accidental changes can make the record invalid. ### DNS Propagation Delays A correctly configured record may not be detected immediately after it is published. Allow sufficient time for the DNS update to become available before assuming there is a configuration error. ### Multiple Conflicting Records _Review existing DNS records before adding new authentication settings_. Conflicting or duplicate records can create unexpected authentication problems. ![Spf Validator 7800](https://media.mailhop.org/duocircle/spf-validator-7800-1788423360284.jpg) ## Best Practices for Campaign Monitor Email Authentication Setting up DKIM is only one part of maintaining a secure and reliable email environment. Consider the following practices: - Review your SPF record regularly and keep it within **SPF lookup limits**. - Enable DKIM for all legitimate third-party email services that send messages for your domain. - Maintain a valid DMARC record for your domain. - Monitor email authentication results to identify unauthorized senders. - Keep track of all platforms that send email using your domain. - Remove outdated services from your email authentication configuration when they are no longer in use. Regular monitoring is especially important because organizations often add new marketing platforms, [customer relationship tools](https://www.ibm.com/think/topics/crm), support systems, and other email services over time. ## Final Thoughts Campaign Monitor users should pay close attention to **DKIM authentication** when sending marketing campaigns from their own domains. Because SPF authentication may not align with your visible From domain when using Campaign Monitor, simply adding an **SPF include** is not necessarily enough for DMARC to pass. Configuring DKIM with an aligned sending domain provides an alternative authentication path that can satisfy DMARC requirements. _The process involves adding your sending domain in Campaign Monitor, obtaining the required DKIM information, publishing the provided TXT record in DNS, and completing the authentication process through the platform_. Once your domain has been successfully authenticated, your Campaign Monitor emails will have stronger [domain authentication](https://www.infobip.com/glossary/domain-authentication) support, helping improve trust in your legitimate email campaigns while contributing to a more **secure email environment**. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F) [ ](https://twitter.com/intent/tweet?text=How%20to%20Set%20Up%20SPF%20and%20DKIM%20for%20Campaign%20Monitor&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fhow-to-set-up-spf-and-dkim-for-campaign-monitor%2F) Copy Related Articles - [ ![spf record qualtrics](https://media.mailhop.org/duocircle/spf-record-checker-1121-1786967008527.jpg) 10 Steps to Validate Your Qualtrics SPF Record Before Launch Blog ](/blog/10-steps-to-validate-your-qualtrics-spf-record-before-launch/) - [ ![ARC Seal Verification](https://media.mailhop.org/duocircle/spf-record-checker-0681-1784617393113.jpg) 7 Steps To Verify ARC Seals Using Popular Email Header Analysis Tools Blog ](/blog/7-steps-verify-arc-seals-popular-email-header-analysis-tools/) - [ ![Public Folder Migration](https://media.mailhop.org/duocircle/office-365-migration-1001-1786097361140.jpg) 9 Backup and Recovery Tips Before Public Folder Migration Blog ](/blog/9-backup-and-recovery-tips-before-public-folder-migration/) - [ ![DKIM DNS Security](https://media.mailhop.org/duocircle/dkim-record-check-1051-1787636025931.jpg) DKIM Network Solutions: DNS, TXT Setup And Troubleshooting Blog ](/blog/dkim-network-solutions-dns-txt-setup-and-troubleshooting/) ## Related Articles [ tutorials 10 Steps to Validate Your Qualtrics SPF Record Before Launch Aug 17, 2026 ](/blog/10-steps-to-validate-your-qualtrics-spf-record-before-launch/)[ tutorials 7 Steps To Verify ARC Seals Using Popular Email Header Analysis Tools Jul 21, 2026 ](/blog/7-steps-verify-arc-seals-popular-email-header-analysis-tools/)[ tutorials 9 Backup and Recovery Tips Before Public Folder Migration Aug 7, 2026 ](/blog/9-backup-and-recovery-tips-before-public-folder-migration/)[ tutorials DKIM Network Solutions: DNS, TXT Setup And Troubleshooting Aug 25, 2026 ](/blog/dkim-network-solutions-dns-txt-setup-and-troubleshooting/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How to Set Up SPF and DKIM for Campaign Monitor","description":"Learn how to set up SPF and DKIM for Campaign Monitor, troubleshoot authentication issues, and improve DMARC alignment and email deliverability for your domain.","url":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/","datePublished":"2026-09-03T00:00:00.000Z","dateModified":"2026-09-03T00:00:00.000Z","dateCreated":"2026-09-03T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/"},"articleSection":"tutorials","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/dmarc-generator-0200-1788421109346.jpg","caption":"Set Up SPF and DKIM"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"tutorials"},{"@type":"ListItem","position":3,"name":"How to Set Up SPF and DKIM for Campaign Monitor","item":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"tutorials","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"How to Set Up SPF and DKIM for Campaign Monitor","item":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How to Set Up SPF and DKIM for Campaign Monitor","description":"Learn how to set up SPF and DKIM for Campaign Monitor, troubleshoot authentication issues, and improve DMARC alignment and email deliverability for your domain.","url":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/","datePublished":"2026-09-03T00:00:00.000Z","dateModified":"2026-09-03T00:00:00.000Z","dateCreated":"2026-09-03T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/how-to-set-up-spf-and-dkim-for-campaign-monitor/"},"articleSection":"tutorials","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/dmarc-generator-0200-1788421109346.jpg","caption":"Set Up SPF and DKIM"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```