Mail Health Report

Fix guides › Zoho Mail

Set up SPF, DKIM and DMARC for Zoho Mail

About 20 minutes, plus waiting time. The records below are for Zoho’s main (.com) data centre. If your Zoho account is on another region, the Admin Console shows the exact values to use.

Last reviewed 7 October 2026

Your Zoho region is in the address you sign in at: mail.zoho.com, mail.zoho.eu, mail.zoho.in, mail.zoho.com.au and so on. Always prefer the values the Zoho Mail Admin Console shows for your domain over generic examples.

1. Mail servers (MX)

For the .com data centre, Zoho uses three MX records. Add each with Name @ and delete MX records from any previous provider:

PriorityValue
10mx.zoho.com
20mx2.zoho.com
50mx3.zoho.com

Other regions use the same pattern with their own ending, such as mx.zoho.eu or mx.zoho.in.

2. Approved senders (SPF)

TypeNameValue
TXT@v=spf1 include:zohomail.com ~all

That include is for the .com data centre; the Admin Console shows the one for your region. If a TXT record starting v=spf1 already exists, add Zoho’s include to it rather than creating a second record. The SPF record builder can merge them for you.

3. Email signing (DKIM)

  1. Sign in to the Zoho Mail Admin Console, open Domains and select your domain. Find the DKIM section (under Email configuration or Email authentication, depending on your console version).
  2. Choose Add and give the key a selector name. Zoho lets you pick any name; zmail is a common choice and the one our checker looks for automatically.
  3. Zoho shows a TXT record named yourselector._domainkey with a long value starting v=DKIM1. Add it at your DNS host, pasting the whole value in one go.
  4. Back in Zoho, select Verify, and once it succeeds, make sure the key is enabled. DNS can take an hour or so to update before verification works.

If you chose a selector other than zmail, type it into the selector box on the DKIM checker to confirm it’s published.

4. Spoofing protection (DMARC)

TypeNameValue
TXT_dmarcv=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com

Replace the address with a mailbox you read. After a few weeks of reports showing your email passing, follow the none-to-reject plan.

5. Check your work

Run the email health check. It should recognise Zoho Mail as your provider and show passes for mail servers, SPF and DKIM.