Zoho MailSPF, DKIM & DMARC Setup
Zoho Mail is a popular Workspace alternative for small teams. Its SPF include and three MX hosts are the same for every tenant; DKIM uses a selector you generate in the admin console.
Already set up? Check what your domain publishes right now — SPF, DKIM (zmail (default — configurable)), DMARC, MX, BIMI, and MTA-STS in one scan.
Run a free domain check →1. SPF record
Publish as a TXT record on your root domain (EU-hosted accounts use include:zohomail.eu — check your data centre in the admin console). One SPF record per domain.
TXT record
v=spf1 include:zohomail.com ~all2. DKIM (selector: zmail (default — configurable))
Zoho Mail Admin Console → Email Configuration → DKIM → add selector (default zmail) → Zoho shows a TXT record for <selector>._domainkey.yourdomain.com. Publish it, verify, then enable.
3. MX records
| Host | Priority |
|---|---|
| mx.zoho.com | 10 |
| mx2.zoho.com | 20 |
| mx3.zoho.com | 50 |
EU data centre accounts use mx.zoho.eu / mx2.zoho.eu / mx3.zoho.eu instead.
Verify with the MX Record Lookup tool.
4. DMARC record
Start at p=none with rua reporting; Zoho's admin console has a deliverability dashboard that surfaces DMARC failures. Tighten policy after a few weeks of clean reports.
TXT record at _dmarc.yourdomain.com
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.comZoho Mail authentication FAQ
Zoho says my domain is verified but mail still fails SPF — why?
Domain verification (the zoho-verification TXT/CNAME) is separate from SPF. You still need the v=spf1 include:zohomail.com record. Also check you're using the right region — EU accounts need zohomail.eu.
Can I use a custom DKIM selector name?
Yes. zmail is only the default — any selector name works as long as the TXT record host matches what you configured in the admin console.
Official documentation: Zoho Mail email authentication docs ↗
Verify your setup
DNS Email Diagnostics
SPF, DKIM, DMARC, MX, BIMI & MTA-STS in one check
MX Record Lookup
See exactly which mail servers your domain publishes
BIMI Validator
Show your logo in Gmail & Yahoo once DMARC is enforced
Deliverability Monitoring
Daily checks + email alerts when a record changes or breaks