Do I need multiple DKIM records if I use multiple ESPs like HubSpot, Sendgrid and ActiveCampaign?

Summary

The consensus among experts, marketers, and official documentation is that you **absolutely need** separate DKIM records for each ESP (Email Service Provider) you use, such as HubSpot, Sendgrid, and ActiveCampaign. This is crucial for ensuring proper email authentication, preventing authentication conflicts, maximizing inbox placement, and avoiding spam filters. Each sending source, including Google Workspace, transactional emails, and marketing campaigns, should have its own DKIM signature. Failure to do so can negatively impact deliverability and damage your sender reputation.

Key findings

  • Unique DKIM Required: Each ESP needs its own DKIM record for proper authentication and deliverability.
  • Enhances Authentication: DKIM verifies the authenticity of emails and that the sender is authorized to send emails on behalf of a domain.
  • Improves Deliverability: Correct DKIM configuration significantly improves email deliverability and inbox placement, preventing emails from being marked as spam.
  • Prevents Conflicts: Using separate DKIM records prevents authentication conflicts between different ESPs.
  • Maintains Reputation: Proper DKIM setup helps maintain a positive sender reputation for each domain or subdomain.

Key considerations

  • ActiveCampaign Specifics: ActiveCampaign has custom DKIM records (2 CNAMEs instead of one), and custom return paths are primarily available for Enterprise plans.
  • Google Workspace Setup: Ensure Google Workspace (or any other email source) is configured to sign DKIM; otherwise, emails from that source may not be properly authenticated.
  • Record Alignment: Align SPF, DKIM, and DMARC records with the email's origination point to ensure end-to-end authentication.
  • All Sending Sources: Remember to configure DKIM for all sources that send email on your behalf, including transactional emails, marketing campaigns, and direct emails from services like Google Workspace.

What email marketers say
11Marketer opinions

When using multiple Email Service Providers (ESPs) like HubSpot, Sendgrid, and ActiveCampaign, it's crucial to configure a unique DKIM record for each ESP. This ensures that each service can properly authenticate emails sent on your behalf, improving deliverability and preventing emails from being marked as spam. Failing to set up separate DKIM records can lead to authentication issues and a damaged sender reputation.

Key opinions

  • Unique DKIM Required: Each ESP (e.g., HubSpot, Sendgrid, ActiveCampaign) requires its own dedicated DKIM record for proper email authentication.
  • Improved Deliverability: Proper DKIM configuration for each ESP ensures better email deliverability and inbox placement.
  • Prevents Authentication Issues: Using separate DKIM records prevents authentication conflicts between different sending services.
  • Maintains Sender Reputation: Individual DKIM records help maintain a positive sender reputation for each domain or subdomain.
  • Avoids Spam Filters: Correctly configured DKIM records help prevent emails from being flagged as spam.

Key considerations

  • ActiveCampaign DKIM: ActiveCampaign utilizes custom DKIM records (2 CNAMEs instead of one), and custom return paths may only be available for Enterprise plans, though this might change.
  • Domain Alignment: Ensure that SPF/DKIM/DMARC records align with the origination point of the email. If emails originate from different sources (e.g., Google Workspace and ActiveCampaign), each needs proper authentication.
  • Ongoing Monitoring: Regularly monitor DKIM records and email deliverability to identify and address any potential issues.
  • All Sending Sources: Each email service that sends mail on your behalf should be properly DKIM signed including transactional mail, marketing campaigns and direct mail from services like Google Workspace.
Marketer view

Email marketer from MailerLite explains that you should set up DKIM records for each ESP to properly authenticate your emails. This ensures that your emails are not marked as spam and improves your overall email deliverability.

August 2022 - MailerLite
Marketer view

Email marketer from Mailjet explains that it is essential to configure DKIM for each ESP you use. Each provider will give you its own DKIM record to add to your DNS to ensure proper authentication.

May 2022 - Mailjet
Marketer view

Email marketer from Email Geeks mentions that ActiveCampaign now has custom DKIM records (2 CNAME vs old single) and only offers custom return path for the Enterprise version, but offering custom return path for all accounts is being discussed.

August 2023 - Email Geeks
Marketer view

Email marketer from SparkPost shares that having separate DKIM records helps in maintaining your sender reputation for each domain or subdomain and ensures better deliverability. So multiple ESP's need to have their own DKIM records configured.

March 2024 - SparkPost
Marketer view

Email marketer from EmailVendorSelection explains that using multiple ESPs requires a dedicated DKIM setup for each. This prevents authentication conflicts and maximizes inbox placement.

October 2022 - EmailVendorSelection
Marketer view

Email marketer from Superuser forum explains that when using multiple email services like transactional emails and marketing campaigns, each service should have its own DKIM record to ensure proper authentication and prevent emails from being marked as spam.

June 2023 - Superuser
Marketer view

Email marketer from Email Geeks confirms that for authentication to align with multiple ESPs (e.g., HubSpot, Sendgrid, and ActiveCampaign), you would need a DKIM record from each ESP.

February 2024 - Email Geeks
Marketer view

Email marketer from Gmass shares that the way to authenticate different sending services is by having separate DKIM records, it verifies to email services that you have authenticated the mail coming from different ESP's and that they are all yours.

April 2021 - Gmass
Marketer view

Email marketer from Reddit explains that yes, you absolutely need separate DKIM records for each ESP you use. Failing to do so will cause authentication issues and hurt your deliverability.

January 2023 - Reddit
Marketer view

Email marketer from Litmus says that DKIM is a crucial element for email authentication, and using different ESPs means you need to setup DKIM for each to have emails correctly identified and avoid spam filters.

December 2023 - Litmus
Marketer view

Email marketer from StackOverflow shares that having a DKIM record for each ESP is crucial to ensure each service can properly sign emails, preventing them from being marked as spam.

August 2023 - StackOverflow

What the experts say
3Expert opinions

Experts emphasize the importance of configuring DKIM for each sending service, especially when using multiple ESPs like HubSpot, Sendgrid, and ActiveCampaign. Ensuring that each service has its own DKIM record is crucial for proper authentication, preventing conflicts, and guaranteeing emails are verified by recipient servers. If a service, like Google Workspace, isn't configured to sign DKIM, it can lead to deliverability issues.

Key opinions

  • DKIM Signing Required: Each email sent should be DKIM signed.
  • Unique DKIM for Each Service: Each sending source requires its own DKIM record to ensure emails are verified.
  • Authentication Benefits: Proper DKIM configuration improves email authentication and helps avoid deliverability issues.

Key considerations

  • Google Workspace Configuration: Verify that Google Workspace or any other email source is properly configured to sign DKIM.
  • Troubleshooting: If DKIM isn't configured correctly, it can lead to deliverability problems; fixing it can improve email delivery.
  • Conflict Prevention: Using individual DKIM records for each ESP prevents authentication conflicts between the different sending services.
Expert view

Expert from Email Geeks explains that DKIM requires each email sent to be signed. If Google Workspace isn’t configured to sign DKIM, then the email sent from there isn’t signed. He suggests fixing it to see what happens.

May 2021 - Email Geeks
Expert view

Expert from Spam Resource shares that each sending source should have its own DKIM record. This configuration prevents authentication conflicts and ensures each ESP’s emails are properly verified by recipient servers.

October 2024 - Spam Resource
Expert view

Expert from Word to the Wise, Laura Atkins, explains that it is vital to configure DKIM for each sending service. Using unique DKIM records for each ensures proper authentication and helps avoid deliverability issues, particularly when using multiple ESPs.

July 2021 - Word to the Wise

What the documentation says
5Technical articles

Official documentation from various sources like SendGrid, Google Workspace, IETF, Microsoft, and AuthSMTP consistently states that when sending emails from multiple services or ESPs, each service should have its own DKIM key or record. This ensures proper authentication, improves deliverability, enhances email security, and prevents emails from being marked as spam.

Key findings

  • Individual DKIM Keys: Each sending source/service (including ESPs and sending domains/subdomains) requires a separate and unique DKIM key or record.
  • Enhanced Authentication: DKIM allows a domain to associate a signature with an email message, vouching for its authenticity.
  • Improved Deliverability: Proper DKIM configuration enhances email security and ensures that your messages are trusted by recipient email servers, improving deliverability and reducing spam.
  • Security Enhancement: Setting up DKIM enhances email security by ensuring messages are trusted and properly authenticated.

Key considerations

  • Multiple Services: When using multiple services (like your own server and a marketing service), each service should use a separate DKIM record.
  • Domain/Subdomain Specific: Each sending domain or subdomain should have its own DKIM record.
  • Preventing Spam: Proper DKIM setup helps in avoiding spam filters and improving email deliverability.
Technical article

Documentation from SendGrid explains that if you send email from multiple services, each should have its own DKIM key. This ensures proper authentication and prevents deliverability issues.

October 2023 - SendGrid
Technical article

Documentation from Google Workspace Admin Help explains that each sending source (e.g., Google Workspace, marketing platform) should have its own DKIM signature to improve deliverability and avoid spam filters.

December 2023 - Google
Technical article

Documentation from ietf.org details that DomainKeys Identified Mail (DKIM) allows a domain to associate a signature with an email message, vouching for its authenticity. Each sending domain or subdomain should have its own DKIM record.

November 2022 - ietf.org
Technical article

Documentation from AuthSMTP tells you need to create individual DKIM keys for each sending domain. If you send through multiple services (like your own server + a marketing service), ensure that each uses a separate DKIM record.

September 2023 - AuthSMTP
Technical article

Documentation from Microsoft explains that setting up DKIM for each of your sending domains enhances email security and ensures that your messages are trusted by recipient email servers. So each ESP should have its own DKIM configured.

May 2024 - Microsoft