Constant Contact has never shipped an SMTP relay: no hostname, no port, no credentials, no add-on at any tier. A Constant Contact admin says so in the official community — the platform “isn’t set up to send an email directly via SMTP” because campaigns are dispatched from its own fleet under its own envelope domain. If you need a host and port for WP Mail SMTP, a server for receipts and password resets, or a relay for notifications, pair Constant Contact with a transactional provider such as Brevo, Postmark or Amazon SES on a separate subdomain. If your real problem is spam placement, the fix is DKIM self-authentication, below.
| SMTP relay | Not offered. No hostname, port or credentials, and no add-on at any plan tier. |
|---|---|
| Sending method | V3 REST API (OAuth 2.0 bearer tokens) or the in-app editor. Smallest sendable unit is a campaign to a list or segment. |
| Sending domain auth | DKIM self-authentication: 2 CNAMEs pointing at ccsend.com, or one TXT public key. Do not add Constant Contact to SPF. |
| Envelope domain | in.constantcontact.com — their Return-Path, so SPF alignment is impossible. |
| Transactional email | Not supported. Pair with Postmark, Brevo, Mailgun or Amazon SES. |
| Inbound / parse | None. Replies go to the campaign’s reply-to address; no inbound API. |
| Official docs | V3 Developer Portal · Authentication overview |
Constant Contact is a campaign-first SMB marketing platform, not a message-transport service. The unit of work is a stored campaign object: you compose in the editor or paste HTML, attach it to a list, and their fleet renders it, injects the unsubscribe footer and sends from its own IP pools. Staff describe exactly that: “those emails are sent from our own servers and authenticated as such.” A relay would bypass every layer the product depends on — consent checks, CAN-SPAM footer injection, unsubscribe handling, bounce and complaint suppression, and the reputation controls that keep a shared IP pool viable.
The commercial model points the same way. Pricing is per contact with a monthly send multiplier — 10× contacts on Lite, 24× on Premium — not per message, so there is no meter for relayed volume. SMTP is therefore not a gated feature you can pay to unlock, and the same admin confirmed the reverse: pointing Constant Contact at your own SMTP server is not possible either.
Four jobs drive this search. Only the fourth — deliverability, covered in the next section — is a Constant Contact task.
Receipts, password resets and booking notices are per-recipient and event-triggered. Constant Contact cannot send them: the V3 API’s smallest sendable unit is a campaign, so even a one-contact-list workaround burns your allowance, logs a campaign in reporting and staples an unsubscribe footer to a password reset. Use Postmark for pure transactional with per-message event history, Amazon SES when an engineer owns the stack and cost decides, or Mailgun and Brevo when you want an API and a plain SMTP endpoint.
If WordPress is silently dropping wp_mail() output — contact forms, WooCommerce receipts, registrations — you need WP Mail SMTP or Easy WP SMTP pointed at a real relay, and Constant Contact cannot be it. The trap: Creative Mail by Constant Contact is a campaign composer, not an SMTP plugin. Pick a provider that hands you a literal host, port, username and password — Brevo and Mailgun both do, in about 2 minutes.
Cron output, monitoring alerts and CRM assignment notices sent through the local sendmail get filtered because they come from an unauthenticated host. Route them through a relay on a dedicated subdomain. Amazon SES and SMTP2GO are the usual picks: both accept standard SMTP AUTH from anything that speaks the protocol, including appliances that will never have an API client.
The fourth job — spam placement, or Gmail showing a ccsend.com sender instead of your brand — is the one that is a Constant Contact task. Staff point users here rather than at SMTP: “we recommend utilizing self-authentication for accounts with their own domains.”
Go to Settings › My Settings › Manage Domains › Authenticate a domain and enter the domain in your From address. Constant Contact generates either two CNAMEs pointing at ccsend.com or, on the TXT route, a DKIM public key. The KB calls CNAME “the simplest and most secure way” and recommends TXT only when several accounts share one domain. Publish, then click validate; propagation can take 24 to 48 hours.
; DKIM self-authentication - CNAME method (recommended) ; Both records are generated inside your account. 100._domainkey.example.com. CNAME 100._domainkey.dkim1.ccsend.com. 200._domainkey.example.com. CNAME 200._domainkey.dkim2.ccsend.com. ; TXT alternative - use when multiple accounts send from one domain <selector>._domainkey.example.com. TXT "k=rsa; p=<public key generated in-account>" ; SPF - leave your existing record ALONE. ; Do NOT add Constant Contact IPs or an include: for them. example.com. TXT "v=spf1 include:_spf.google.com ~all"
Two failure modes cause most stuck validations. Many DNS panels auto-append the zone name to the host field — type 100._domainkey.example.com there and you publish 100._domainkey.example.com.example.com, which never validates; enter only 100._domainkey. And both CNAMEs must resolve: one of two is a fail.
On SPF the counter-intuitive rule is to do nothing. The KB is explicit: “Receiving mail servers check our domain’s SPF record, not yours, so you do not need to add Constant Contact IP addresses to your SPF record if you have one.” Adding includes anyway gains nothing and pushes you toward the 10-lookup SPF limit.
Constant Contact mail cannot achieve SPF alignment: the KB notes the bounce address is their own server at @in.constantcontact.com, “which will never match your visible ‘From’ address.” Not a defect — DMARC passes on aligned SPF or aligned DKIM. It does make DKIM your only path, which makes the order of operations non-negotiable.
; Author your own DMARC record - Constant Contact supplies no value. ; Start here, before self-authentication validates: _dmarc.example.com. TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1" ; Only once Manage Domains shows validated and reports show DKIM passing: _dmarc.example.com. TXT "v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc@example.com"
Publish p=quarantine or p=reject before self-authentication validates and every campaign from your domain fails DMARC. Stay at p=none, complete self-authentication, wait out the 24–48 hour window, confirm validated status, read 7 days of aggregate reports, then ramp. One hard constraint: a free-webmail From address cannot be self-authenticated at all and gets rewritten to ccsend.com.
There is no SMTP rate limit because there is no SMTP. What binds is a monthly send allowance derived from contact count, plus a V3 API request quota.
| Limit | Value | Notes |
|---|---|---|
| Send allowance — Lite | 10× contacts / month | From $12/mo, $10.20/mo annual; scales with list size. |
| Send allowance — Standard | 12× contacts / month | From $35/mo, $29.75/mo annual. |
| Send allowance — Premium | 24× contacts / month | From $80/mo, $68/mo annual. |
| Overage | $0.002 per send | Billed per message beyond the plan multiplier. |
| V3 API requests | 10,000/day, 4/second | = 240 req/min, resetting at 00:00:00 UTC. Breaching returns HTTP 429 with quota_exceeded or throttled. |
Read the quota correctly: it counts requests, not messages. One call that schedules a campaign fans out to the whole list, so a modest daily budget dispatches millions of messages. Volume is bound by the monthly allowance and overage rate, not the API ceiling.
If a tutorial, forum answer or AI assistant hands you smtp.constantcontact.com on port 587, it is invented, and you will lose an afternoon to connection-refused errors. The two real hostnames are not mail servers: ccsend.com is a DKIM key-lookup target, in.constantcontact.com the outbound bounce domain.
The KB says do not: receiving servers check Constant Contact’s SPF record, not yours. Adding IP blocks or includes gains nothing and risks blowing the 10-lookup limit, producing a permerror that breaks SPF for the senders that do rely on your record — Google Workspace or Microsoft 365 included.
Since SPF can never align, DKIM is the only route to a pass. Enforce before Manage Domains shows validated and every campaign is quarantined or rejected at Gmail, Yahoo and Microsoft. It looks like a total collapse in opens on the next send, easy to misattribute to content. Records first, 24–48 hours, validated status, then tighten.
Creative Mail by Constant Contact is a campaign builder; it does not intercept wp_mail(), so it will not fix a site dropping contact-form mail. Zapier’s “Constant Contact + SMTP by Zapier” recipes are the inverse of what the name suggests: some other SMTP server triggers or receives, Constant Contact only holds contacts.
Run marketing on Constant Contact and transactional on a dedicated relay, split across two subdomains of one root domain: campaigns from your self-authenticated brand domain, receipts and resets from something like tx.example.com, authenticated separately at the relay. Choose by who owns the stack — Postmark for pure transactional with per-message event history, Amazon SES when an engineer runs infrastructure and cost decides, Brevo or Mailgun when a marketer needs credentials to paste into a plugin. If you are still weighing the marketing side, Mailchimp, AWeber and GetResponse are the comparables — none offers a relay either.
Separate subdomains do most of the work: DKIM keys, reputation and DMARC reporting resolve per sending domain, so a complaint spike on a campaign cannot drag your password resets down with it. Beyond that, three rules. Keep one DMARC record at _dmarc.example.com covering both, not one per provider, and remember a subdomain inherits the organisational policy unless you override it with sp=. Keep SPF scoped to the relay and your corporate mail; Constant Contact belongs nowhere in it. And assign ownership per message type so nothing double-sends: if a purchase triggers a receipt at the relay and adds the buyer to a Constant Contact welcome automation, the automation must not fire on the receipt event. The symptom is two near-identical messages from two From domains within a minute.
There are none. Constant Contact publishes no SMTP hostname, port, username or password, because the service does not exist — an admin states the platform “isn’t set up to send an email directly via SMTP.” Any smtp.constantcontact.com you find online is fabricated. Mail is sent from campaigns built in the UI or through the V3 REST API.
No. SMTP is not gated — it is absent at every tier, including Premium at $80/month, with no add-on and no resold partner relay. The reverse is unavailable too: you cannot point Constant Contact at your own SMTP server.
No. The smallest sendable unit in the V3 API is a campaign to a list or segment; there is no per-recipient endpoint. A one-contact-list workaround consumes your allowance and attaches an unsubscribe footer to a password reset. Use Postmark, Brevo, Mailgun or Amazon SES.
You cannot — WP Mail SMTP needs a real relay and Constant Contact does not provide one. Point it at a transactional provider instead, and note that Creative Mail by Constant Contact does not reroute wp_mail(). Keep Constant Contact connected separately for contact sync and campaigns.
Do DKIM, skip SPF, then ramp DMARC. Under Settings › My Settings › Manage Domains, authenticate your domain and publish the two generated CNAMEs pointing at ccsend.com, or the TXT key if several accounts share the domain. Leave SPF untouched. Start at p=none and enforce only once the domain shows validated, which takes up to 48 hours.
Because your From address is free webmail such as gmail.com or yahoo.com. Constant Contact rewrites those to its shared ccsend.com domain, self-authentication is unavailable, and you have no route to DMARC alignment on your own domain. No plan upgrade fixes it — you need a domain you control.
This review follows our email infrastructure testing methodology. We disclose affiliate relationships in our editorial independence policy.