How to authenticate domain with Zoho DMARC, DKIM and SPF?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is like a security stamp on your emails that tells email providers they're really from you and what to do if they're not.

DKIM (DomainKeys Identified Mail) adds a digital signature to your emails so recipients can check if they've been tampered with during delivery. SPF (Sender Policy Framework) is like a guest list for your emails, specifying which servers are allowed to send emails on your behalf to prevent spoofing and spam. By utilizing Zoho CRM's domain authentication services, you can generate DNS records that provide a distinct signature to your emails, effectively fortifying them against spam filters. In this guide, we'll walk you through the step-by-step process of setting up domain verifications in your Zoho CRM account.

1. After logging in to Zoho CRM, click on the Settings icon and go to Emails in the Channels box.

   

2. Head over to the Email Deliverability tab in the top menu.

3. Here you'll see the email domain you used to sign up for the account. Hover the cursor over this domain and click Authenticate. (You can also add any other domain by clicking Add Domain highlighted in blue)

   

4. Next, enter your email (the part of your webmail before "@") in the pop-up window and click Add Domain.

   

5. Zoho CRM will send a verification code to this email address. Copy the code from the email, click on "Enter code", paste this code, and click Verify. Your email status will be shown as "Verified" straight away.

   

6. Now click on "Validate records" under Authentication status.

   

7. After that, you'll see Zoho DKIM and SPF records on a pop-up window. Copy these records and add them to your DNS provider.

8. On the Cloudflare dashboard, go to the Home tab, and click on your Website.

9. Here, open DNS, select Records and click Add Record.

10. Write the SPF and DKIM record name and value here and click Save.

    

    NOTE: Because Zoho CRM uses its own domain for the "Envelope From" address, SPF alignment might fail with the sender's actual "From address" domain during DMARC checks. To sort out this issue, use the DMARC Check tool.

11. Enter your domain in this tool and click Check. It will give you a suggested DMARC value that prevents SPF misalignment.

    

12. Copy this DMARC record name and value, and add it to your DNS provider.

13. Now go back to Zoho CRM and click on Validate Records.

    

14. After validation, you'll see your domain status as "Authenticated."