How do I set up Keap so its email passes DMARC?

What does Keap ask me to publish?

Keap will generate three CNAME records for DKIM authentication.

Keap makes the values for your account, so we do not print any here.

Where in Keap are my values shown?

Pro and Max editions: Click your profile icon in the bottom-left corner of the app, select Settings , and navigate to the Domains page.

In Keap, open the Domains page under Settings (Pro and Max editions), or Marketing, Settings, Email Authentication (Ultimate and Classic).

Copy each value from there exactly as shown, and add each record at your DNS host.

Will p=reject block Keap email?

Before creating a new DMARC record, check whether your domain already has one - each domain should have only one DMARC record.

Not once Keap signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Keap gives you are on your domain.

Keap says to check first whether your domain already has a DMARC record, because each domain should have only one.

Keap also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from Keap passes.