Improve your email deliverability - DKIM and SPF

This article will go through the what you should do to improve the deliverability of your emails sent through Infusionsoft by Keap.

If you are not very IT savvy, you can send the instructions to the person assisting you with this.

This article will focus on the technical aspects; DKIM and SPF.

How to set up DKIM in Infusionsoft by Keap

So, what is DKIM?

DKIM (Domain Keys Identified Mail) is a complex email protocol that allows a sender's identity to be authenticated by the recipient to help combat email fraud. DKIM affords the greatest assurance that the sender is who they say they are and gives email providers a way to track and hold senders accountable for the messages they're sending. As a result, deliverability of these messages is greater and inbox placement is improved.

Follow these steps to set up DKIM in your Infusionsoft by Keap app: 1. Go to Marketing > Settings

2. Go to Email Authorization and Click the Add a Domain button

3. In the window that appears, select the domain for which you would like to create a DKIM key from the drop-down. This will populate the field in step two.

4. Now, follow steps that appear on-screen. These instructions require you to create a CNAME entry on your DNS records (done on your domain at your service provider).

5. In the last step, you'll click the Verify button at the bottom of the window to continue. Infusionsoft by Keap will attempt to validate the CNAME record you created in your DNS. The record must be live in order for your Infusionsoft by Keap account to successfully validate it. If the record cannot be verified, wait until the Time-To-Live (TTL) settting of your DNS provider has passed, and try to validate again by clicking the Retry Validationlink.

Configure Your SPF Records

This is done on your domain at your service provider, and will be done by whoever administers your domain.

So, what is SPF?

In an effort to protect you as a business owner and a sender of emails, your web host uses Sender Policy Framework (SPF) as a method to prevent unauthorized senders from forging your email address, or “spoofing”. In short, SPF protects you by validating the sending server to confirm that the emails appearing to come from you are authorized.Regardless of what service provider you use to send email, you need to ensure that your SPF record is configured to authorize that provider (in this case, Infusionsoft by Keap) to send email from your sender address.

How-to Steps

When you edit your SPF record, you will be modifying or adding a TXT record.

You may also be asked for a Host. You want to type in the “@” sign or edit the existing row with the “@” sign so that the authorization applies to your entire domain.

Your SPF will then look something like thisv=sp1 a mx ptr include:mydomain.com ~allorv=sp1 a mx ptr Ip4:xxx.xxx.xxx.xxx ~all

If you don’t have an SPF record listed, you will want to create the following TXT entry:TXT | @ | v=spf1 mx include:infusionmail.com ~all

If you do have an SPF record listed, you will want to append the entry so that it looks something like this:TXT | @ | v=spf1 a mx ptr include:mydomain.com include:infusionmail.com ~allorTXT | @ | v=spf1 a mx ptr Ip4:xxx.xxx.xxx.xxx include:infusionmail.com ~all

You may also be asked about TTL. Most of the time there is a default value here, but if not set it for 15 min. Sources:

https://help.infusionsoft.com/help/configure-your-spf-records https://help.infusionsoft.com/help/dkim