Email Authentication for Zoho Mail: Complete Setup

SPF Setup

Zoho uses regional SPF includes. Add the correct one for your datacenter:

Region	SPF Include
US	include:zoho.com
EU	include:zoho.eu
India	include:zoho.in
Australia	include:zoho.com.au
China	include:zoho.com.cn

Example TXT record for US:

Type: TXT
Host: @
Value: v=spf1 include:zoho.com ~all

Not sure which region? Check your Zoho Mail URL — if it's mail.zoho.com, you're US. mail.zoho.eu means EU, and so on.

Practitioner note: The regional SPF include is the most common Zoho authentication mistake I see. People copy include:zoho.com from a US-centric guide when their Zoho account is on the EU datacenter. SPF fails, DMARC fails, and they don't understand why.

DKIM Setup

1. Log in to Zoho Admin Console → Mail Admin → DKIM
2. Click Add for your domain
3. Enter a selector name (e.g., zoho or default)
4. Select 2048-bit key length
5. Copy the generated TXT record
6. Add it to your DNS:

Type: TXT
Host: zoho._domainkey
Value: v=DKIM1; k=rsa; p=<long public key string>

7. Return to Zoho and click Verify

Zoho will start signing outbound email with DKIM once verification succeeds.

DMARC Setup

With SPF and DKIM working, add your DMARC record:

Type: TXT
Host: _dmarc
Value: v=DMARC1; p=none; rua=mailto:[email protected]

Follow the standard advancement timeline. Zoho's DKIM alignment uses relaxed mode by default, which works with standard DMARC alignment settings.

Verification

Send a test email and check the headers for:

• spf=pass with the Zoho sending IP
• dkim=pass with your domain
• dmarc=pass

Zoho's Admin Console also shows DKIM verification status under Mail Admin → DKIM.

Practitioner note: Zoho is one of the easier platforms to configure authentication for — fewer gotchas than Google Workspace or Microsoft 365. The main thing is getting the regional SPF include right on the first try.

Additional Senders

If you use Zoho CRM, Zoho Campaigns, or other Zoho products that send email, they may use the same include:zoho.com SPF include. Check Zoho's documentation for each product — some require additional DKIM configuration.

If you're migrating to Zoho Mail and want authentication set up correctly from day one, schedule a consultation.

Sources

• Zoho: SPF Configuration
• Zoho: DKIM Configuration
• Zoho: DMARC Policy

---

v1.0 · April 2026