This article covers how to set up a default fallback From address in Keap™. When enabled, emails that would normally fail to send due to authentication issues are rerouted and sent from a specified authenticated domain instead, reducing bounces and improving deliverability.

How This Helps

• Better deliverability — Emails that would bounce due to authentication issues are rerouted through an authenticated From address, helping messages reach recipients even when the original sender's domain is not authenticated.

• Fewer email bounces — Emails that would otherwise be rejected are sent from a trusted, authenticated domain, reducing bounce rates.

• More control over email routing — A single authenticated From address can be designated as the fallback, ensuring emails are routed through a trusted domain when default authentication fails.

Definitions

• Authenticated domain — A domain connected to Keap for sending emails. An authenticated domain is verified and trusted by email providers, has DKIM and DMARC records configured using Keap's domain authentication process, and displays as Connected in the Keap application.

  

  The screenshot above shows a domain displaying Connected status in Keap Domains settings.

• Unauthenticated domain — A domain not connected to Keap for sending emails. Emails sent from unauthenticated domains are more likely to experience deliverability issues including bounces, blocks, or spam filtering.

Requirements

At least one connected and authenticated domain must be present in the Keap account to use the default From address fallback feature.

Best Practices Before Setting Up the Fallback

The default From address acts as a fallback, not a replacement for proper authentication. For best results before enabling this feature:

1. Ensure all users have a profile email address on a connected and authenticated domain.

2. Update all automation email templates to send from the connected, authenticated domain.

Set Up a Default Fallback From Address

Keap Pro and Max

1. Navigate to Settings in the Keap application.

2. Select Domains.

3. Select From Settings.

4. Under the Default Domain section, enter the email username and select the authenticated domain to use as the default From address for unauthenticated bounces. Any domain that is connected and authenticated with the Keap account can be selected.

5. Select Save Changes.

The screenshot above shows the Default Domain configuration in Keap Pro and Max From Settings.

Keap Ultimate and Max Classic

1. Navigate to Marketing, then select Settings.

2. Select Email Authentication.

3. Select From Settings.

4. Under the Default Domain section, enter the email username and select the authenticated domain to use as the default From address for unauthenticated bounces. Any domain that is connected and authenticated with the Keap account can be selected.

5. Select Save Changes.

The screenshot above shows the Default Domain configuration in Keap Ultimate and Max Classic Email Authentication settings.

Limitations

• Only one default From address and domain can be configured per Keap account. If multiple businesses or domains for separate products or services are managed under one account, all unauthenticated bounces will be rerouted through the same single fallback address.

• If multiple domains are in use, the default fallback feature may not meet all use cases, as only one domain can be set.

• All emails that fail to send due to authentication issues will be rerouted and sent from the configured default From address.

Frequently Asked Questions

What does this article cover?

This article covers how to set up a default fallback From address in Keap to reduce email bounces caused by unauthenticated domains, including setup steps for Keap Pro and Max, and for Keap Ultimate and Max Classic.

What is required to use the default From address fallback?

At least one connected and authenticated domain must be present in the Keap account. See how to validate a custom domain in Keap for setup instructions.

Can more than one fallback From address be configured?

No. Only one default From address and domain can be configured per Keap account. Accounts that manage multiple businesses or domains under a single app are limited to one fallback address for all unauthenticated bounces.