How to Set Up DKIM for Zoho Mail

Step-by-step guide to configure DKIM in Zoho Mail. Learn how to generate DKIM keys, add TXT records, and verify your Zoho email authentication.

Last updated: 2026-01-28

Zoho Mail provides professional email hosting with built-in DKIM support. Setting up DKIM ensures your emails are authenticated and helps them reach recipients' inboxes instead of spam folders.

Why Set Up DKIM in Zoho

Without DKIM:

  • Emails may be treated as suspicious
  • Deliverability can suffer
  • Your domain reputation isn't established

With DKIM:

  • Emails are cryptographically signed
  • Better inbox placement
  • Improved sender reputation
  • Compliance with Google and Yahoo's sender requirements

Before You Start

You'll need:

  • Zoho Mail admin access
  • Access to your domain's DNS settings
  • Your domain already added and verified in Zoho Mail

Zoho uses the selector zmail for DKIM. Unlike some services, Zoho uses TXT records rather than CNAME records.

Step-by-Step Setup

1

Access Email Authentication

Log into Zoho Mail Admin Console at mailadmin.zoho.com.

Navigate to Domains → Select your domain → Email ConfigurationEmail Authentication (or DKIM).

2

Generate DKIM key

Click Add or Generate to create a new DKIM key.

Zoho will generate a key pair and display the public key you need to add to DNS.

3

Copy the DKIM record

Zoho displays the TXT record details:

  • Host/Name: zmail._domainkey (or zmail._domainkey.yourdomain.com)
  • Value: A long string starting with v=DKIM1; k=rsa; p=...

Copy the entire value—it's your public key.

4

Add the TXT record to DNS

Log into your DNS provider and add a new TXT record:

  • Type: TXT
  • Host/Name: zmail._domainkey
  • Value: The full DKIM value from Zoho
  • TTL: 3600 or default
5

Verify in Zoho

Return to Zoho Mail Admin Console and click Verify or Check.

If DNS has propagated, Zoho will confirm the DKIM record is found and valid.

6

Enable DKIM signing

After verification, ensure DKIM signing is enabled for outgoing emails. Zoho typically enables this automatically once verified.

Verify Your Setup

After verification completes, test the DKIM record publicly.

Look up: zmail._domainkey.yourdomain.com

Zoho DKIM Selector

Zoho uses zmail as the default selector. This is consistent across all Zoho Mail accounts.

If you see a different selector in your Zoho admin, use that one—Zoho occasionally updates their configuration.

Common Issues and Solutions

"Verification failed"

Cause: DNS hasn't propagated or the record is misconfigured.

Solutions:

  • Wait 15-30 minutes and try again
  • Verify the TXT record exists using a DNS lookup tool
  • Check that the entire public key was copied (they're long)
  • Ensure there are no extra spaces or line breaks in the value

Record appears truncated

Cause: Some DNS providers have character limits or truncate long TXT records in their display.

Solutions:

  • The record may be complete even if the display truncates it—test with our DKIM checker
  • If truly truncated, contact your DNS provider or use a provider that supports long TXT records

DKIM passes but shows wrong domain

Cause: If you're using Zoho CRM or other Zoho services that send email, they may have their own DKIM configuration.

Solution: Set up DKIM separately for each Zoho product that sends email (Zoho Mail, Zoho CRM, Zoho Campaigns, etc.).

Zoho's multiple products

Zoho Mail, Zoho CRM, Zoho Campaigns, and Zoho Desk may each need separate email authentication configuration. Check each product's settings.

Zoho CRM DKIM

If you use Zoho CRM to send emails:

  1. Go to SetupChannelsEmailDeliverability
  2. Click on Email Authentication
  3. Follow the DKIM setup process specific to Zoho CRM

Zoho CRM may use a different selector or require additional records.

Adding Records to Common DNS Providers

GoDaddy

  1. DNS Management → Add Record → TXT
  2. Host: zmail._domainkey
  3. TXT Value: (paste from Zoho)
  4. Save

Cloudflare

  1. DNS → Add record → TXT
  2. Name: zmail._domainkey
  3. Content: (paste from Zoho)
  4. Save

Namecheap

  1. Advanced DNS → Add New Record → TXT
  2. Host: zmail._domainkey
  3. Value: (paste from Zoho)
  4. Save

Complete Your Email Authentication

Zoho Mail also supports SPF and DMARC. For complete authentication:

SPF: Add Zoho's servers to your SPF record:

include:zoho.com

Or region-specific:

include:zohomail.com (US)
include:zoho.eu (EU)
include:zoho.in (India)

Check at spfrecordcheck.com.

DMARC: Set up a DMARC policy. Check at dmarcrecordchecker.com.

Monitor Your DKIM Records

Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.

Never miss a DKIM issue

Monitor your SPF, DKIM, DMARC and MX records daily. Get alerts when something breaks.

Start Monitoring