SPF, DKIM and DMARC for Zoho Mail

The DNS records Zoho Mail needs so your mail is authenticated and stays out of spam.

SPF	TXT at `@`	v=spf1 include:zohomail.com ~all Zoho's current documentation uses `include:zohomail.com`; accounts in the India or EU data centres use `zohomail.in` / `zohomail.eu`. The older `include:zoho.com` still resolves but is not what Zoho documents now. Using more Zoho apps that send mail? Zoho offers `include:one.zoho.com`. Combine with your other senders →
DKIM	CNAME / TXT	TXT record at `<selector>._domainkey` (for example `zmail._domainkey`) generated in the Zoho Mail Admin Console.
DMARC	TXT at `_dmarc`	v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com Start with `p=none` and a mailbox you read; build your own.

Step by step

Add the SPF record below at @, using the include that matches your data centre.
In the Zoho Mail Admin Console open Domains, pick your domain and go to Email configuration → DKIM.
Add a selector (any short name, e.g. zmail), generate the key and publish the TXT record at zmail._domainkey.
Click Verify, then make sure the DKIM key is enabled for the domain.
Publish DMARC with p=none and watch the reports before enforcing.

Zoho Campaigns, ZeptoMail and Zoho CRM mail need their own authentication on top of Zoho Mail.
Picking the wrong data-centre include (.com vs .in vs .eu) makes SPF fail for every message.

Rather not touch DNS? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr

Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.