How to Set Up SPF for Zoho Mail (Step-by-Step)

SPF for Zoho Mail is one TXT record and a verification click.

Prerequisites

• Zoho Mail account with your domain configured
• DNS host access
• Any existing SPF record noted (check with the SPF lookup tool)

Step 1 — Choose Your SPF Value

Zoho global (default):

v=spf1 include:zoho.com ~all

Zoho EU tenants (.eu):

v=spf1 include:zoho.eu ~all

Zoho + other providers:

v=spf1 include:zoho.com include:_spf.google.com ~all

Zoho’s include:zoho.com currently consumes ~2 DNS lookups. Watch the total 10-lookup budget if chaining.

Step 2 — Publish the TXT Record

At your DNS host:

• Name — @ (root)
• Type — TXT
• Value — v=spf1 include:zoho.com ~all
• TTL — Auto or 3600

Replace any existing SPF TXT record (only one allowed per domain).

Step 3 — Verify at Zoho

In the Zoho Mail admin console → Domains → your domain → Email Configuration → SPF: click Verify. Zoho checks the DNS record and marks it valid.

Also verify with the SPF lookup tool — should show SPF=Pass and the published record.

Step 4 — Send a Test Message

From your Zoho Mail account to an external inbox. Open the headers:

Authentication-Results: mx.google.com;
    spf=pass (google.com: domain of [email protected] designates ...)

spf=pass = ready. Run a full check with the email authentication checker.

Step 5 — Add DKIM + DMARC

After SPF passes:

1. Enable DKIM in Zoho admin console → Domains → your domain → Email Configuration → DKIM. Zoho generates the record; publish it as TXT at {selector}._domainkey.yourdomain.com.
2. Publish DMARC at _dmarc.yourdomain.com — start with v=DMARC1; p=none; rua=mailto:[email protected].

Common Miss

• Wrong include (spf.zoho.com — doesn’t exist; use zoho.com)
• Two SPF TXT records → PermError
• Global tenants publishing include:zoho.eu → mail from Zoho global servers fails SPF

Confirm with the email authentication checker.

Related

Read what an SPF record is, check the SPF glossary entry, and follow up with what DMARC is.