DMARC for mailbox providers
How do I set up DMARC for Zoho Mail?
Zoho Mail needs one SPF include and a DKIM TXT record at a selector you name in the admin console.
The DNS records for Zoho Mail
SPF: TXT on your domain
v=spf1 include:zohomail.com -allUse ~all if the domain also sends from other servers, and merge those servers in. For several Zoho services, Zoho documents include:one.zoho.com.
DKIM selector: You choose it; zoho is Zoho's example
<selector>._domainkey.example.com TXT (value from the Zoho Mail admin console)Choose a 1024-bit or 2048-bit key. A domain can have several selectors, and a default selector applies to all users.
Values in angle brackets are specific to your account. Copy the real ones from Zoho Mail rather than from this page.
Alignment caveats
- ✓Publish at the provider your nameservers point to. A record at a registrar that is not hosting DNS is ignored.
- ✓Keep a single SPF record under 10 DNS lookups, as Zoho's page also warns.
From p=none to p=reject with Zoho Mail
- Publish
v=DMARC1; p=none; rua=mailto:<your-business-id>@mail.yourdmarc.online, or build it with the DMARC generator. Delivery does not change at this stage. - Add the records above, then verify them with the SPF checker and the DKIM checker, entering your selector.
- Verify DKIM in the Zoho admin console and confirm the aligned pass in your reports, then deal with any other senders on the domain.
- Move to
p=quarantinewhen your legitimate mail passes, and watch the reports for anything you missed. - Move to
p=rejectwithsp=reject. Read the enforcement guide for what tends to break, and keep monitoring afterwards.
Sources
Taken from Zoho Mail's own documentation, checked on 1 November 2026. Providers change these, so their setup screen wins over this page.
See how Zoho Mail really does on your domain
Check a real message against the Gmail, Yahoo and Outlook.com sender rules, or test whether a stranger can send mail as your domain. Both are free.
Frequently asked questions
What SPF record does Zoho Mail need?
v=spf1 include:zohomail.com -all, published as: TXT on your domain. Use ~all if the domain also sends from other servers, and merge those servers in. For several Zoho services, Zoho documents include:one.zoho.com.
What DKIM selector does Zoho Mail use?
You choose it; zoho is Zoho's example. Choose a 1024-bit or 2048-bit key. A domain can have several selectors, and a default selector applies to all users.
Will Zoho Mail mail pass DMARC alignment?
Only once a passing SPF or DKIM result is on your From domain or its organizational domain. Publish at the provider your nameservers point to. A record at a registrar that is not hosting DNS is ignored.
How do I reach p=reject with Zoho Mail?
Start at p=none with a rua address, finish the Zoho Mail setup, then read your reports. Verify DKIM in the Zoho admin console and confirm the aligned pass in your reports, then deal with any other senders on the domain. Move to p=quarantine, then p=reject, once your legitimate mail passes.
As a global team, we’re always available. Let’s talk!
© 2026 yourDMARC
Download to read the eBook
