Setup guide
Zoho Mail SPF, DKIM and DMARC setup
SPF, DKIM, DMARC and MX for a Zoho Mail domain: where to find the values for your data centre and how to add a DKIM selector.
Set them up in this order: SPF and DKIM first, then DMARC, which relies on both. All are records at your DNS provider (where you bought the domain, or Cloudflare), not in Zoho Mail.
1. SPF
One TXT record on the root of the domain. If other tools send as you, add their includes to this same record — a domain can have only one SPF record.
TXT · host @
v=spf1 include:zohomail.com ~all
This is the value for Zoho's US data centre. Accounts in another region (EU, India, Australia…) use that region's domain: copy the include Zoho's admin console shows.
2. DKIM
The key is generated per domain, so copy it from Zoho Mail Admin Console → Domains → your domain → Email configuration → DKIM.
- Click Add, enter a selector name (for example zmail) and generate the key.
- Add the TXT record Zoho shows at <selector>._domainkey on your domain.
- Click Verify in Zoho, then make the selector the default.
Record type: TXT. Not showing up? DKIM record not found.
3. DMARC
A TXT record at _dmarc. Start by monitoring with p=none and your own report address, then move to quarantine and reject.
TXT · host _dmarc
v=DMARC1; p=none; rua=mailto:[email protected]
4. MX
So replies to your outreach are delivered.
MX · host @
MX 10 mx.zoho.com MX 20 mx2.zoho.com MX 50 mx3.zoho.com
US data centre values; other regions use their own hosts (mx.zoho.eu, mx.zoho.in…).
Questions
The checker can't find my Zoho DKIM key
Zoho lets you name the selector yourself. Enter yours under Advanced in the checker.
Last checked 2026-10-21. Providers move their settings around; if a menu above has changed, search Zoho Mail's admin help for “DKIM” or “SPF”.
Sending cold email? Outsquid re-checks these records for every sending domain every hour, so a broken one doesn't go unnoticed. How deliverability works