DNS guides

Setup guide

Zoho Mail SPF, DKIM and DMARC setup

SPF, DKIM, DMARC and MX for a Zoho Mail domain: where to find the values for your data centre and how to add a DKIM selector.

Set them up in this order: SPF and DKIM first, then DMARC, which relies on both. All are records at your DNS provider (where you bought the domain, or Cloudflare), not in Zoho Mail.

1. SPF

One TXT record on the root of the domain. If other tools send as you, add their includes to this same record — a domain can have only one SPF record.

TXT · host @

v=spf1 include:zohomail.com ~all

This is the value for Zoho's US data centre. Accounts in another region (EU, India, Australia…) use that region's domain: copy the include Zoho's admin console shows.

2. DKIM

The key is generated per domain, so copy it from Zoho Mail Admin Console → Domains → your domain → Email configuration → DKIM.

  1. Click Add, enter a selector name (for example zmail) and generate the key.
  2. Add the TXT record Zoho shows at <selector>._domainkey on your domain.
  3. Click Verify in Zoho, then make the selector the default.

Record type: TXT. Not showing up? DKIM record not found.

3. DMARC

A TXT record at _dmarc. Start by monitoring with p=none and your own report address, then move to quarantine and reject.

TXT · host _dmarc

v=DMARC1; p=none; rua=mailto:[email protected]

4. MX

So replies to your outreach are delivered.

MX · host @

MX 10 mx.zoho.com
MX 20 mx2.zoho.com
MX 50 mx3.zoho.com

US data centre values; other regions use their own hosts (mx.zoho.eu, mx.zoho.in…).

Questions

The checker can't find my Zoho DKIM key

Zoho lets you name the selector yourself. Enter yours under Advanced in the checker.

Last checked 2026-10-21. Providers move their settings around; if a menu above has changed, search Zoho Mail's admin help for “DKIM” or “SPF”.

Sending cold email? Outsquid re-checks these records for every sending domain every hour, so a broken one doesn't go unnoticed. How deliverability works