Sending provider
Zoho Mail SPF, DKIM and DMARC setup
Zoho Mail needs v=spf1 include:zohomail.com ~all at the root of your domain, or include:one.zoho.com if you use several Zoho services. DKIM is a TXT record at <selector>._domainkey with a selector you choose in the Admin Console (Zoho's example is zoho), switched on after it verifies. Then add DMARC at _dmarc, starting with p=none.
Zoho Mail
Records at a glance
- SPF record
v=spf1 include:zohomail.com ~all- DKIM
TXT at <selector>._domainkey, selector set in the Admin Console
- DMARC
TXT at _dmarc, p=none first, then quarantine and reject
Check Zoho Mail on your domain
Enter the domain you send from: the check looks for the Zoho Mail SPF include, its DKIM key and your DMARC record, and says what to fix.
Looks for SPF include:zohomail.com, DKIM at zoho and a DMARC record. Lookups go from your browser to Cloudflare's public DNS resolver.
DNS records
The Zoho Mail records
Values in angle brackets are specific to your account; copy them from the provider. Hosts are relative to your domain, as most DNS panels expect them.
- Name / host
@Valuev=spf1 include:zohomail.com ~allZoho also shows a -all version, and include:one.zoho.com for several Zoho services in one lookup
- Name / host
<selector>._domainkeyValue<TXT value generated in the Admin Console>Copy the whole TXT value Zoho generates; with selector zoho the host is zoho._domainkey
- Name / host
_dmarcValuev=DMARC1; p=none; rua=mailto:admin@<yourdomain>Zoho's longer example adds ruf, sp, adkim, aspf and pct; keep one DMARC record
Good to know
- Only one SPF record per domain: merge Zoho's include into the record you already havesource (opens the vendor's page in a new tab)
- MX values depend on the data center that hosts your account; take them from Admin Console > Tools & Configurationssource (opens the vendor's page in a new tab)
- DKIM keys are 1024 or 2048 bits, and Zoho supports several selectors per domainsource (opens the vendor's page in a new tab)
- DKIM signs only mail created in Zoho and delivered directly; mail through Email Routing or an outbound gateway is not signedsource (opens the vendor's page in a new tab)
Step by step
Turn on DKIM in Zoho Mail
Open DKIM settingssource (opens the vendor's page in a new tab)
In the Admin Console go to Domains, select the domain, then Email Configuration > DKIM
Add a selectorsource (opens the vendor's page in a new tab)
Click Add, enter a selector name such as zoho, pick a 1024 or 2048-bit key and click Add
Publish the TXT recordsource (opens the vendor's page in a new tab)
Copy the TXT value and create a TXT record at <selector>._domainkey. Leave the domain out if your DNS host adds it
Verify and enablesource (opens the vendor's page in a new tab)
Click Verify next to the selector and enable DKIM when Zoho asks
Where the records go
Field by field for the DNS panel your domain uses:
DMARC
DMARC with Zoho Mail
- Set up SPF and DKIM first, then publish one TXT record at _dmarcsource (opens the vendor's page in a new tab)
- Zoho's example: v=DMARC1; p=none; rua=mailto:admin@yourdomain.com; ruf=mailto:admin2@yourdomain.com; sp=none; adkim=r; aspf=s; pct=40source (opens the vendor's page in a new tab)
- Move from p=none to quarantine and then reject, raising pct step by stepsource (opens the vendor's page in a new tab)
TXT at _dmarc
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comReplace the address with a mailbox you read; move to p=quarantine when the reports show every sender passing.
Troubleshooting
Common Zoho Mail errors and fixes
Two SPF records
Merge them into one v=spf1 record with every includesource (opens the vendor's page in a new tab)
SPF over 10 DNS lookups
Remove includes you no longer use; include:one.zoho.com covers several Zoho services in onesource (opens the vendor's page in a new tab)
Verify fails right after adding
Wait 12 to 24 hours, depending on the TTL, then click Verify againsource (opens the vendor's page in a new tab)
Records added where DNS is not served
Add them at the DNS provider your nameservers point to, which may differ from the registrarsource (opens the vendor's page in a new tab)
DKIM verify fails
Copy the entire key, name the record <selector>._domainkey and leave the domain out if the host adds itsource (opens the vendor's page in a new tab)
For cold email
Mailboxes that come with the DNS records done
If the domain is for cold outreach, keep Zoho Mail on your main domain and send from separate domains. Outreach2day buys the domains, publishes SPF, DKIM and DMARC, creates the mailboxes and starts warm-up, then sends your campaigns from its own sequencer or exports the mailboxes to Instantly or Smartlead.
- SPF, DKIM and DMARC set for youOn every domain, checked after setup and kept in place
- $2.50 a mailbox a month12-mailbox minimum; warm-up and the sending engine included
- 1,000+ mailboxesA volume price per mailbox, quoted on a call
Questions
What is the Zoho Mail SPF record?
v=spf1 include:zohomail.com ~all at the root of the domain. If you use several Zoho services, Zoho suggests include:one.zoho.com. Accounts in other data centers take their values from the Admin Console.
What DKIM selector does Zoho Mail use?
The one you type when you add DKIM in the Admin Console; Zoho's example is zoho, which makes the record zoho._domainkey. Enter yours in the checker above if it differs.
Why does Zoho DKIM not verify?
The key was cut off when copied, the host name has the domain twice, or DNS has not updated yet. Fix the record and click Verify again after the TTL passes.
Can I send cold email from Zoho Mail?
Keep Zoho for company mail on the main domain. Cold outreach usually runs from separate domains with their own warmed mailboxes, so the company domain keeps its reputation.
Sources
Zoho Mail documentation, checked . Menus and values change; if a step differs, Zoho Mail's own page is the reference.
Deliverability call
Talk to our deliverability team
Book a call with the people who run our mailbox infrastructure. We look at your current setup and tell you what to change. Running 1,000+ mailboxes? We also quote a volume price below every vendor list price in our comparisons, warm-up and sending included.
- Review your domains, DNS records and current inbox placement
- Size the setup: domains, mailboxes per domain and daily volume per mailbox
- Plan warm-up and the move from your current provider or sequencer
- 1,000+ mailboxes: a volume price per mailbox for your setup
Free call
See open times in your time zone and book on this page.
Or open the booking pageLoading available times…
Open the booking page instead