Zoho Mail: SPF, DKIM & DMARC Setup Guide
Zoho Mail is easy to configure correctly. Here's the exact SPF, DKIM, and DMARC records you need — and the common mistakes that cause deliverability problems.
1SPF Record Setup
Recommended SPF record for Zoho Mail:
v=spf1 include:zoho.com ~allFor Zoho Mail Europe, use include:zohomail.eu instead. For Zoho Mail India, use include:zoho.in. Check your Zoho Mail datacenter in Settings → Mail Administrator → Organization Profile.
Step-by-step setup:
- 1Log in to Zoho Admin Console (admin.zoho.com)
- 2Go to Mail Administration → Domains → select your domain
- 3Under Email Configuration, find SPF record
- 4Add TXT record to your DNS: v=spf1 include:zoho.com ~all
- 5Click Verify SPF in Zoho Admin
- 6Test with our SPF checker
2DKIM Setup
Example DKIM record location:
zoho._domainkey.yourdomain.comZoho generates a DKIM key with the 'zoho' selector. The TXT record value is provided in Zoho Admin Console. It's a standard TXT record (not CNAME), so the full public key is published directly.
Step-by-step setup:
- 1In Zoho Admin Console, go to Mail Administration → Domains → your domain
- 2Under Email Configuration, find DKIM configuration
- 3Copy the TXT record value (the public key)
- 4Add as a TXT record at zoho._domainkey.yourdomain.com
- 5Click Verify DKIM in Zoho Admin after 24–48 hours
- 6Test with our DKIM checker
3DMARC Policy
Recommended DMARC record:
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com; pct=100Add as a TXT record at: _dmarc.yourdomain.com
With Zoho's SPF and DKIM in place, DMARC will pass. Publish your DMARC record at _dmarc.yourdomain.com. Zoho also has a DMARC manager feature in its admin panel.
Common Zoho Mail Deliverability Issues
Zoho emails rejected by Gmail with authentication failure
Ensure you've selected the correct datacenter (zoho.com vs zohomail.eu vs zoho.in). The wrong SPF include is the most common cause of authentication failures with Zoho.
DKIM verification failing in Zoho Admin
Check that the TXT record was published exactly as provided — no line breaks, no modifications. DNS propagation for TXT records can take 24–48 hours. Use our DNS Lookup tool to verify.
Multiple users experiencing bounce issues
Check if your domain's sending IP (from Zoho's infrastructure) is blacklisted. Run a blacklist check with our tool. If listed, contact Zoho support — shared IP issues require Zoho to initiate delisting.
Is Your Zoho Mail Domain Blacklisted?
Authentication passing is necessary — but not sufficient. Check if your sending domain or IP is on any of 60 blacklists. Free, instant, no signup.
Check Your Domain FreeChecks all 60 blacklists + SPF, DKIM, DMARC, MX in under 10 seconds