Zoho Mail SPF, DKIM & DMARC Setup (DNS Records) | InboxVerify
Setup guide

Zoho Mail: SPF, DKIM and DMARC setup

Updated October 12, 2026 · By the InboxVerify team

This guide shows the DNS records Zoho Mail needs so your email is authenticated: SPF, DKIM and DMARC. Use the exact values from your Zoho Mail account where they differ — providers update them from time to time.

Domain CheckerCheck what your domain already has before you change anything.
Open Domain Checker →

1. SPF record for Zoho Mail

Add Zoho Mail to your domain's SPF record. If you have no SPF record yet, create this TXT record on the root of your domain (host @):

TXT · @
v=spf1 include:zohomail.com ~all

Already have an SPF record? Do not add a second one — insert include:zohomail.com before the ~all / -all at the end of your existing record.

Zoho uses a different include per data centre: include:zohomail.com (US), include:zohomail.eu (EU), include:zohomail.in (India). Use the one shown in your Zoho admin console.

Use the SPF Generator to combine several services and the SPF Checker to confirm you stay under 10 DNS lookups.

2. DKIM for Zoho Mail

In Zoho Mail, follow this path and publish the record it shows:

  1. Zoho Mail Admin Console → Domains → select domain → Email Configuration → DKIM → Add selector → publish the TXT record
  2. Verify.
  3. Give DNS a few minutes, then confirm the record with the DKIM Checker.

The DKIM selector is usually zmail, so the record lives at zmail._domainkey.yourdomain.com. Enter that selector in the DKIM Checker to verify it.

3. DMARC

After SPF and DKIM pass, add a DMARC record so receivers know your policy and send you reports. Start in monitoring mode:

TXT · _dmarc
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Then follow the step-by-step DMARC rollout to reach quarantine and reject safely.

4. MX records

To receive email with Zoho Mail, your MX records must point to Zoho Mail's servers (host names containing zoho.com, zoho.eu). Copy the exact values from your Zoho Mail admin panel and check them with the MX Lookup.

Where to add the records

  • Cloudflare — Cloudflare dashboard → select your domain → DNS → Records → Add record. For mail records keep the proxy (orange cloud) OFF.
  • GoDaddy — GoDaddy → My Products → your domain → DNS → Manage DNS → Add New Record.
  • Namecheap — Namecheap → Domain List → Manage → Advanced DNS → Add New Record. Use "@" for the root domain.
  • Hostinger — Hostinger hPanel → Domains → your domain → DNS / Nameservers → Manage DNS records.
  • Amazon Route 53 — AWS console → Route 53 → Hosted zones → your domain → Create record. Wrap TXT values in quotes.
DNS changes usually apply within minutes, sometimes up to the TTL of the old record. Re-run the checks after publishing.

Frequently asked questions

Do I need SPF, DKIM and DMARC for Zoho Mail?

Yes. Gmail and Yahoo require SPF and DKIM plus DMARC for bulk senders, and authenticated mail is far less likely to land in spam.

Can I have two SPF records?

No. Two SPF records make SPF fail. Combine all services into one record.

How do I check that Zoho Mail authentication works?

Run the Domain Checker, or send a message to Gmail and use "Show original" to see SPF, DKIM and DMARC results.

What is the DKIM selector for Zoho Mail?

Usually "zmail" — but use the selector shown in your Zoho Mail admin panel if it differs.