> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Campaign settings

> Set your schedule, exclusions, active phishing domains and header value.

## Start date

The start date is the day the planner begins scheduling emails for the period ahead. It
starts scheduling simulations for the next day, within office hours.

Announcing the campaign to your colleagues before that date? See
[Start campaign & reporting](/template-campaign-start).

<Warning>
  If you start a campaign late in the month, later than roughly the twentieth, everyone will
  still receive a mail that month. That can be inconvenient. In that case it is better to
  start the following month.
</Warning>

## Phishing frequency

The last step is **Phishing frequency**, found on the **Campaign settings** tab. It controls
how many emails are scheduled within the timeframe you choose, expressed as a maximum number
of emails per period.

Your frequency setting also becomes the default clustering in your
[dashboard](/campaign-dashboard), so it affects how your results are grouped as
well as how mail is sent.

## Exclude keywords

Keywords filter out phishing simulations that contain particular words. Add them under
**Settings** then **Campaign**, pressing Enter after each keyword.

Matching covers the whole email, both the subject line and the body. Use it to avoid
simulations on topics that would be confusing or sensitive in your organisation.

## Exclude attachments

The same tab controls whether simulations with attachments are sent. Disable attachments to
exclude every simulation that carries one from your campaign.

<Warning>
  Only disable attachments when you cannot whitelist them in your environment. It keeps
  simulations delivering, but removes a common phishing tactic from your results. See
  [Whitelisting](/whitelisting) first.
</Warning>

## Active phishing domains

Simulations are sent from a pool of phishing domains. Under **Settings** then **Campaign** you
can activate and deactivate the individual domains used in your simulations.

We regularly add new domains, and it is worth including these in your setup, because they make
simulations more realistic and effective. Rotating domains also makes it less likely that users
learn to recognise and ignore our domains, and trains them to look at signals beyond the sender
address.

<Steps>
  <Step title="Whitelist the new domains">
    Add them in your environment. See [Whitelisting](/whitelisting).
  </Step>

  <Step title="Activate them">
    Turn them on in the domain list on this tab.
  </Step>

  <Step title="Test">
    Send a whitelisting test under **Emails** then **Tests**.
  </Step>
</Steps>

## Refreshing the whitelisting header

If you use the whitelisting by header option, refresh the header value periodically. This
improves security by reducing the risk of unauthorised access through a header value that may
have been compromised.

Click **New** to generate a new value, then update it in your mail environment. See
[Whitelisting by header](/whitelisting-header).

<Warning>
  Generate the new value and update your mail environment in the same sitting. Between those
  two actions, simulations may be filtered.
</Warning>

<Note>
  If you change any setting, click **Save Changes** at the bottom of the page.
</Note>

## Next

That completes onboarding. Your campaign now runs on its own. Within a few days,
results start appearing in the [dashboard](/campaign-dashboard).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.