SPF for Zoho Mail: Complete Email Authentication Setup Guide

Zoho Mail is a popular email hosting choice for small and midsize businesses, especially those already using Zoho's broader suite of productivity tools. If you're sending business emails through Zoho Mail, setting up SPF ensures that receiving email servers recognize your messages as legitimate and don't flag them as spam.

For a comprehensive overview of SPF, see our complete SPF guide. This guide walks you through the entire process — from finding the right SPF include for your Zoho region to verifying that everything works.

What SPF Does for Your Zoho Mail

SPF (Sender Policy Framework) is a DNS record that tells receiving email servers which mail servers are allowed to send email on behalf of your domain. Without an SPF record, any server could pretend to be you. With one, receiving servers can check whether the email actually came from Zoho's servers and reject anything that didn't.

If you're unfamiliar with SPF, our guide on how SPF works covers the fundamentals.

Finding Your Zoho SPF Include

Zoho operates data centers in multiple regions, and the correct SPF include depends on which Zoho region your account is hosted in (Zoho Mail Help: SPF Configuration). Using the wrong regional include won't authorize your mail servers properly.

How to identify your region: Look at the URL when you log into Zoho Mail. If it's mail.zoho.com, use include:zoho.com. If it's mail.zoho.eu, use include:zoho.eu, and so on. You can also check in Zoho Mail Admin under your account details.

Setting Up SPF for Zoho Mail

Using Zoho's Built-In Domain Authentication

Zoho Mail has its own domain authentication panel that guides you through setting up SPF, DKIM, and DMARC. This is the recommended starting point because it gives you the exact DNS records tailored to your account.

To access it:

1. Log into the Zoho Mail Admin Console
2. Go to Domains under the left sidebar
3. Select your domain
4. Click on "Email Authentication" or "Email Configuration"

Zoho will show you the specific TXT record values for SPF and DMARC, plus the DKIM selector and key you need to add. Follow their provided values exactly — they're customized for your region and account configuration.

Setting Up DKIM for Zoho Mail

SPF alone isn't enough for strong email authentication. DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your emails, proving they haven't been tampered with in transit.

Zoho makes DKIM setup straightforward:

1. In the Zoho Mail Admin Console, go to your domain's Email Authentication settings
2. Zoho generates a DKIM key pair for you — copy the TXT record they provide
3. Add the TXT record to your DNS (the host name will look something like zmail._domainkey.yourdomain.com)
4. Go back to Zoho and click Verify

Once DKIM is active, your emails carry a signature that receiving servers can verify. For a detailed walkthrough and testing, see DKIM Test.

Adding DMARC After SPF and DKIM

Once both SPF and DKIM are working, you should add a DMARC record. DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails — whether to deliver the message anyway, quarantine it, or reject it outright.

A good starting DMARC record looks like this:

v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com

Start with p=none to monitor without affecting delivery. Once you're confident your legitimate emails are passing, move to p=quarantine or p=reject. Understand the difference between softfail and hardfail to choose the right SPF enforcement level. Use DMARC Record Checker to validate your DMARC setup.

Common Zoho SPF Mistakes

Using the wrong regional include. This is the most common mistake. If you're on zoho.eu but your SPF record says include:zoho.com, your European Zoho servers won't be authorized. Double-check your Zoho login URL.

Creating a second SPF record. If you already have an SPF record for another email service, don't create a new one for Zoho. Add Zoho's include to your existing record. Two SPF records on the same domain cause a PermError, which breaks authentication for all your email.

Forgetting subdomains. If you send email from a subdomain (like mail.yourdomain.com), you need an SPF record on that subdomain too. The SPF record on your root domain doesn't automatically cover subdomains.

Exceeding the 10 DNS lookup limit. Each include in your SPF record triggers DNS lookups. If you're using Zoho plus several other services, you may exceed the 10 DNS lookup limit. Check your total lookup count with the tool above.

Zoho Mail with Other Email Services

Many businesses use Zoho Mail for everyday email alongside a marketing or transactional email service. Here are common combinations:

Zoho + Mailchimp:

v=spf1 include:zoho.com include:servers.mcsv.net ~all

Zoho + SendGrid:

v=spf1 include:zoho.com include:sendgrid.net ~all

Zoho + HubSpot:

v=spf1 include:zoho.com include:mail.hubspot.net ~all

If you're managing multiple email services, SPF Creator can help you build the correct combined record. For a deeper look at handling multiple services, see our guide on SPF for multiple ESPs.

Verifying Your Complete Setup

After configuring SPF, DKIM, and DMARC, verify everything is working:

1. Check your SPF record using the tool above. Confirm it's valid and includes the correct Zoho regional include.
2. Check Zoho's verification status in the Admin Console. All three protocols should show green checkmarks.
3. Send a test email to a Gmail address. Open it, click the three dots, select "Show original," and look for spf=pass and dkim=pass in the Authentication-Results header.
4. Run a full deliverability check at Deliverability Checker to see your SPF, DKIM, DMARC, and MX records in one view.

Monitor Your SPF Records

Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.

References

• RFC 7208: Sender Policy Framework (SPF) — The current SPF specification
• Zoho Mail: SPF Configuration — Official Zoho Mail SPF setup guide