How do I set up ActiveCampaign so its email passes DMARC?

What does ActiveCampaign ask me to publish?

When you set up a sending domain , this process includes setting up a Mailserver Domain with ActiveCampaign where you point your domain to us via a CNAME record. This allows ActiveCampaign to serve the necessary SPF record for you.

ActiveCampaign makes the values for your account, so we do not print any here.

Where in ActiveCampaign are my values shown?

Head to Advanced Settings to authenticate your existing domain.

In ActiveCampaign, go to Advanced Settings to authenticate your domain.

Copy each value from there exactly as shown, and add each record at your DNS host.

Will p=reject block ActiveCampaign email?

By default, it will be a domain owned and operated by ActiveCampaign, like acems1.com .

Not once ActiveCampaign signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records ActiveCampaign gives you are on your domain.

By default ActiveCampaign signs with its own domain, so DMARC alignment depends on the DKIM records you publish.

ActiveCampaign says a quarantine or reject policy needs DKIM set up first, or all its mail fails the DMARC test.

ActiveCampaign also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from ActiveCampaign passes.