Editing Troubleshooting issues with domain authentication (section)

== Troubleshooting Issues with Domain Authentication ==

Domain authentication is a crucial aspect of sending emails successfully and ensuring that they arrive in your recipients' inboxes instead of their spam folders. Properly authenticating your domain helps protect your brand and enhances your email deliverability. However, users may encounter various issues during the setup process. This article outlines common troubleshooting messages and provides suggestions for resolving them.

=== How to Access This Feature ===

To access domain authentication settings in ActiveCampaign, follow these steps:

1. Log in to your ActiveCampaign account.
2. Navigate to the '''Settings''' section from the main dashboard.
3. Select the '''Domain Authentication''' option.

=== Step-by-Step Instructions ===

If you encounter an error while setting up domain authentication, here are guides for resolving the most common error messages:

1. **DNS Record Issues**  
   - **Error Message:** “Your DNS records are not set up correctly.”  
   - **Solution:** This indicates that your DNS records are not correctly configured with your DNS provider. Check for typos or errors and verify you are editing DNS in the correct provider (e.g., the domain may be registered with GoDaddy but managed through Cloudflare). Use the tool at [https://mxtoolbox.com/DNSLookup.aspx] to check your DNS management.  
   - **Tip:** Consider using the '''Configure Domain''' option to allow ActiveCampaign to automate the correct setup after you authorize access.

2. **DKIM Record Notification**  
   - **Error Message:** “Your domain is set up with DKIM with the legacy TXT record at dk._domainkey.activecampaign.com…”  
   - **Solution:** As of February 23, 2023, ActiveCampaign updated DKIM from a '''TXT record''' to a '''CNAME record'''. Although the legacy method still functions, updating to the new CNAME records is more secure. Navigate to '''Advanced Settings''' and click on **Check DNS** for updates on your DKIM settings.
   - The relevant DNS records for CNAME can be viewed once you access this section.

3. **Valid Domain Input Required**  
   - **Error Message:** “Please enter a valid domain name (e.g., mydomain.com)…”  
   - **Solution:** This message appears when the entered domain name is invalid. Common mistakes include:
     - Entering a full email address (e.g., sue@mydomain.com).
     - Including prefixes like '''https://''' or '''http://'''.
     - Including paths such as '''/contact-us'''.
     - Using '''www''' or backslashes.
     - Using capital letters (only enter in lowercase).

4. **CNAME Record Issues**  
   - **Error Message:** “Only one of your CNAME records is set up…”  
   - **Solution:** This indicates that one of the required CNAME records isn't set correctly. Ensure both ActiveCampaign-generated CNAME records are in place. If they appear correct, consult your DNS provider for further troubleshooting.

=== Configuration Options and Settings ===

When troubleshooting domain authentication, it’s essential to understand the various settings associated with it:

- '''DNS Records''' - These must be configured correctly with your DNS provider.
- '''CNAME Records''' - ActiveCampaign recommends transitioning from '''TXT records''' to '''CNAME records''' for DKIM authentication.
- '''Domain Validation''' - Ensure you are inputting valid domain names in the corresponding fields.

=== Best Practices and Tips ===

- Always double-check your DNS entries for accuracy.
- Use the '''Configure Domain''' tool in ActiveCampaign when setting up your sending domain for automated assistance.
- Regularly review your DKIM settings to ensure they comply with the latest security practices.
- When in doubt, reach out to your DNS provider for expert assistance.

=== Common Use Cases with Examples ===

- **Example 1:** A user registers a domain with GoDaddy but manages DNS records with Cloudflare. They may experience authentication issues if they edit the records on the wrong platform.
- **Example 2:** A user who previously set up DKIM with a TXT record before February 23, 2023, receives a notice about the legacy setup. They should update to CNAME records for enhanced security.

=== Troubleshooting Section ===

If you encounter issues not covered in this article, consult the following resources for additional insights:
- Consider reviewing the troubleshooting guide for failed DMARC email delivery [here](https://help.activecampaign.com/hc/en-us/articles/360010810180).
- For more information on verifying and authenticating sending domains, explore the dedicated documentation [here](https://help.activecampaign.com/hc/en-us/articles/360015584680-Verify-your-email-domain).

=== Related Features ===

- [[Domain Authentication]] - Learn more about the authentication process and how to set it up effectively.

=== Frequently Asked Questions (FAQ) ===

'''Q: What is the purpose of domain authentication?'''  
A: Domain authentication enhances your email deliverability, ensuring that your emails reach your recipients' inboxes while protecting your brand.

'''Q: How can I check if my DNS records are correctly set up?'''  
A: Use tools like [https://mxtoolbox.com/DNSLookup.aspx] to view and verify your DNS settings.

'''Q: What should I do if I see a legacy TXT record error?'''  
A: Update your DKIM setup to include CNAME records as recommended by ActiveCampaign for better security.

'''Q: How can I fix issues with my CNAME records?'''  
A: Verify that both required CNAME records are present and contact your DNS provider for assistance if necessary.

'''Q: Is domain authentication available on all plans?'''  
A: Yes, domain authentication is available on Starter, Plus, Pro, and Enterprise plans.

'''Q: What is the significance of DKIM and CNAME records?'''  
A: DKIM (DomainKeys Identified Mail) helps prevent email spoofing by verifying the sender using cryptographic signatures, and CNAME records are a more secure method of achieving this than traditional TXT records.

'''Q: Can I revert back to using TXT records for DKIM?'''  
A: While you can continue using legacy TXT records, it is not recommended due to security concerns; it is advisable to transition to CNAME records.

By using this article, you should be able to troubleshoot most issues related to domain authentication effectively, ensuring a smoother email sending experience through ActiveCampaign.
```