Making Email More Secure: Understanding DKIM and SPF

Imagine you’re sending an important letter to a friend. You write your message, put it in an envelope, and drop it in the mailbox with your address (From Address) and your friend's address (To Address). But what if someone along the way tampers with your letter, changes the contents, or even forges a letter pretending to be you? Your friend might receive a completely different message, or worse, never get it at all.

This is exactly the kind of problem businesses face with email security. Just like traditional letters, emails can be intercepted, modified, or forged. To protect email communication, organizations use two important security measures: DKIM (DomainKeys Identified Mail) and SPF (Sender Policy Framework).

Zylker Techfix encountered a major issue without these security measures : customers weren’t receiving support emails. Some emails bounced back, while others landed in spam folders. Without DKIM and SPF, email providers couldn’t verify whether Zylker’s emails were genuine or forged.

Understanding DKIM

Like official letters have signatures or company seals to prove authenticity, DKIM (DomainKeys Identified Mail) does the same for emails.

DKIM : The Signature Seal for Emails

• DKIM attaches a cryptographic signature to every email you send.
  
• When the recipient’s email service (like Gmail, Outlook, or Yahoo) gets the email, it checks this signature against your company’s domain records.
• If the signature matches, the email is verified as authentic and delivered safely.
• If the signature is missing or doesn’t match, the email might get rejected or marked as spam.
  

Adapting Custom SMTP for Public Domains

Using email forwarding and two-factor authentication, Zylker Techfix used public domains like Microsoft and Google with Zoho SMTP. Configuring DKIM was not the solution in this case; instead, the Custom SMTP setup within Zoho Desk resolved the issue. To further enhance security, they could enable Custom SMTP OAuth for a passwordless configuration.

Why did Zylker Techfix Implement DKIM?

Zylker Techfix used organization-level email addresses from a domain procured through their official website. These addresses were used by different departments. However, they faced email bounces due to authentication failures when sending messages via Zoho’s servers. This disrupted their customer support services, as bounced emails prevented ticket creation.

To resolve this, they enabled DKIM authentication in Zoho Desk. The setup was simple:

1. Added the DKIM public key as a TXT record in their DNS settings.
2. Verified the key using the "Verify" option in Zoho Desk.
3. Ensured all outgoing emails carried the DKIM signature to authenticate email communications.

By enabling DKIM, Zylker Techfix significantly improved email deliverability, reduced email tampering, and prevented spoofing.

Understanding SPF

Now imagine you’re sending the package to your friend through a trusted courier service like FedEx or UPS. If someone tries to deliver a fake package using their branding, the courier service will refuse to accept it.

SPF (Sender Policy Framework) works in the same way—it ensures that only authorized mail servers can send emails on behalf of your domain.

SPF: The "Authorized Courier"

• SPF acts as a list of trusted email servers that are allowed to send emails from your domain.
• When an email is received, the recipient's email provider checks whether it came from an authorized server.
• If the email comes from a trusted source, it is delivered; else it is rejected or marked as spam.

How did Zylker Techfix implement SPF?

Set up SPF by specifying specified email services as their authorized email senders.

To improve security, Zylker Techfix set up SPF records to tell email providers:

"Only emails sent from Authorized email servers should be considered legitimate. If an email comes from another server, don’t trust it!"

The Benefits

Setting up SPF prevented spam, fraudulent emails, and email spoofing while ensuring better email deliverability. 

After implementing DKIM and SPF, email deliverability improved, customers received emails without issues, and communication became more secure and professional.

Final Thoughts for Every Business

Whether you’re a small startup or a large enterprise, email security matters. Without DKIM and SPF, your business risks lost emails, email spoofing or tampered messages. 

Enable DKIM and SPF today!

• Topic Participants

• Lydia | Zoho Desk

  

• Sticky Posts

• Register for Zoho Desk Beta Community

  With the start of the year, we have decided to take a small step in making the life of our customers a little easier. We now have easy access to all our upcoming features and a faster way to request for beta access. We open betas for some of our features

• Share your Zoho Desk story with us!

  Tell us how you use Zoho Desk for your business and inspire others with your story. Be it a simple workflow rule that helps you navigate complex processes or a macro that saves your team a lot of time; share it here and help the community learn and grow with shared knowledge. 

• Tip #1: Learn to pick the right channels

  Mail, live chat, telephony, social media, web forms—there are so many support channels out there. Trying to pick the right channels to offer your customers can get pretty confusing. Emails are most useful when the customer wants to put things on record. However, escalated or complicated issues should not be resolved over email because it's slow and impersonal.  When you need immediate responses, live chat is more suitable. It's also quick and convenient, so it's the go-to channel for small issues. 

• Welcome to Zoho Desk Community - Say hello here!

  Hello everyone! Though we have been here for a while, it’s time to formally establish the Zoho Desk Community; we’re really happy to have you all here! This can be the place where you take a moment to introduce yourself to the rest of the community. We’d love to hear all about you, what you do, what company or industry you work for, how you use Zoho Desk and anything else that you will like to share! Here’s a little about me. I am Chinmayee. I have been associated with Zoho since 2014. I joined here

• Webinar 1: Blueprint for Customer Service

  With the launch of a host of new features in Zoho Desk, we thought it’ll be great to have a few webinars to help our customers make the most of them. We’re starting off with our most talked about feature, Blueprint in Zoho Desk. You can register for the Blueprint webinar here: The webinar will be delivered by our in-house product experts. This is a good opportunity to ask questions to our experts and understand how Blueprint can help you automate your service processes. We look forward to seeing

• Recent Topics

• Outlook is blocking incoming mail

  Outlook is blocking all emails sent from the Zoho server. ERROR CODE :550 - 5.7.1 Unfortunately, messages from [136.143.169.51] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3150). It looks

• Not receiving email from customers and suppliers

  I am getting error . most of the customers tell me not able to send me email please check i have attached screenshot

• Create user

  Hello I want to create user, but i get this error Unusual activity detected from this IP. Please try again after some time.

• File emails in Shared email folder

  Hi, I am unable to allow users to collaborate in Shared email folders: User 1 shares a folder let's say "SharedTopic" with full permissions Users 2 and 3 can see this folder but are unable to add emails to this folder or search in this folder. For example,

• Consolidated report for multi-organisation

  I'm hoping to see this feature to be available but couldn't locate in anywhere in the trial version. Is this supported? The main aim to go to ERP is to have visibility of the multi-organisation in once place. I'm hopeful for this.

• How to Switch from Outlook for Mac to Outlook for Windows

  The most often used file formats for users to manage crucial data are OLM and PST files. PST files keep a copy of data on the configured system from Outlook, while the OLM file contains the Mac Outlook data items, which are only accessible with Outlook

• Name autocomplete

  Hi, During searching emails the web tool does not always propose the auto-completion of the saved emails. As a result I either have to go to contacts and look up the exact email, or the exact full name including the middle name and any dots, which is

• Are custom portals accessible on the Zoho learn smartphone app?

  In other words, can users external to my organisation, once signed up, use the app in the same way as internal users? Thanks

• How to increase my Zoho sign limit.

  I cannot send a document/contract for signature. Zoho sign says I reached my monthly limit. May I know how to fix this please? Thanks! 

• Can not add m365 outlook account to zohomail.

  I am attempting to use zoho mail as an imap client to add my outlook.com m365 account. In the m365 exchange admin center i have made sure the imap is enabled. In zoho mail i go to settings, mail accounts, add account, add imap account, i select "outlook",

• Unable to attach Work Order / Service Appointment PDF to Email Notifications (Zoho FSM)

  I’m trying to include the Work Order PDF or Service Appointment PDF as an attachment in Email Notifications (automation/notification templates), but I don’t see any option to attach these generated PDFs. Is this currently supported in Zoho FSM? If not,

• local file csv import problem

  The issue occurs when I upload a CSV file via Databridge. In the preview, everything looks correct — the values are in the proper columns. However, after clicking Import, the first column becomes empty, and the values from that column appear in a new

• Función Deshacer y Rehacer

  Hola. Soy un reciente usuario de Zoho Notebook que he migrado desde Evernote. He encontrado en falta una función que considero muy importante: un botón para "deshacer". Es frustrante cuando se borra un parte del texto o un archivo de una nota, generalmente

• Tip #59- Technician Console: Exploring View option- 'Insider Insights'

  Hello Zoho Assist Community! Ever wondered how technicians adapt quickly during a live support session? Imagine a customer reaching out with an issue that’s disrupting their work. The technician starts a remote session and begins troubleshooting right

• MRP or Manufacturing Module for Zoho

  We have been searching for options for a production planning or MRP that will integrate with Zoho.   Zoho Creator is pushed as a platform that can have an MRP built from scratch but we would like to find more of an out of the box solution and modify it to fit our needs.  Are there any recommendations? Would Zoho consider creating a custom solution in Creator to support this need?

• encountering an error when attempting to associate an email with a Deal using the Zoho CRM extension in Zoho Mail.

  When I click "Yes, associate," the system displays an "Oops!! Something went wrong" error message. I have attached a screenshot of the issue for reference.

• Can 1 Zoho CRM instance sync with 2 Zoho Marketing Automation instances?

  Can 1 Zoho CRM instance sync with 2 Zoho Marketing Automation instances?

• Can I add Conditional merge tags on my Templates?

  Hi I was wondering if I can use Conditional Mail Merge tags inside my Email templates/Quotes etc within the CRM? In spanish and in our business we use gender and academic degree salutations , ie: Dr., Dra., Sr., Srta., so the beginning of an email / letter

• Zoho mail account ownership transfer

  We recently took over another company and have assumed responsibility for its Zoho account, including Zoho Mail and all related services. We would like to formally transfer ownership of this account to our organization. Could you please outline the complete

• Email Authentication is Failing

  I'm trying to setup gitlab with email authentication. I used the following configs picked up from: https://docs.gitlab.com/omnibus/settings/smtp/ gitlab_rails['smtp_enable'] = true gitlab_rails['smtp_address'] = "smtp.zoho.com" gitlab_rails['smtp_port']

• DMARC reports for mail I didn't send: how to deal with?

  I know the enthusiastic amateur's bare minimum about e-mail; am able to set up a Thunderbird account and know the basic acronyms. I have a Zoho Mail account connected to my domain, and have set up SPF, DMARC and DKIM successfully according to Zoho's instruction

• ms

  Email set up for communication

• Fix the speed

  It takes ages to load on every step even though my dataset is quite small.

• Capture Bank Charges for Invoice Payments

  We've added the Bank Charges field in the "Add Payments" page both in Zoho Invoice & Zoho Books. So all you need to do is to enter the bank charges when you record a payment for the invoices. This bank charge will be included to the amount paid for that invoice. Steps to add the bank charges while you record the payment:       1. Click the "Invoices" sub-tab under the "Money-In" tab.       2. Click the 'add payment' link for the invoice that you wish to record the payment for.       3. On the add

• Image field in custom module

  Hi guy, Is there any hope of adding a custom image field in the custom module? We created a custom module to keep track of assets, and it would be helpful if we could attach an image to the record. Thanks Rudy

• Deluge Function to Update Custom Field

  I'm trying to get a Deluge function (which will run as part of a Schedule in Desk) that retrieves all tickets with the status "Recurring" and updates the custom field checkbox "cf_recurring" to "true". Here's what I have, which doesn't work: searchValue

• "View ticket" link is broken

  The "View ticket" link in our Zoho ticketing system confirmation emails is broken (please see attached). Impacts ability to update/review details, and, refresh recollection at a later date. Any help would be much appreciated.

• import data from Apollo.ai into zoho crm via zoho flow

  I might be asking this question in the wrong forum. We use Apollo.ai to find potential new leads for our business, there are around 10000 leads that we have initially found. We have an Apollo.ai account but just to do searches, we dont use it as a crm.

• Woocommerce Line Item Information

  I'd like to add each line item from a Woocommerce order to a zoho creator form record. The line items are found within the line items array, but I'm not sure how to get each item out of the array? Any help would be much appreciated.

• Synching changes to Stripe when changes are made in Zoho Billing

  We have a situation where we have merged customers in Zoho BIlling and then found out later that the payment in Stripe was not updated and still associated with the old customer record. The card gets updated and billed, but that payment is still associated

• How do I fix this? Unable to send message; Reason:554 5.1.8 Email Outgoing Blocked.

  How do I fix this? Unable to send message; Reason:554 5.1.8 Email Outgoing Blocked.

• Disable Smart Filters By Default

  The smart filters "feature" is causing confusion for Zoho Mail users. New emails should be delivered to the inbox unless they have specifically opted to redirect them somewhere else. People don't understand that new emails might be waiting in a random

• ME SALE ESTE ERROR: No fue posible enviar el mensaje;Motivo:554 5.1.8 Email Outgoing Blocked

  Ayuda!! Me sale este error al intentar enviar mensajes desde mi correo electronico de Zoho! Tampoco recibo correos pues cuando me envia rebotan. Ayuda, Me urge enviar unos correo importantes!! Quedo atenta MAGDA HERNANDEZ +5731120888408

• Client Script | Update - Client Script Support For Custom Buttons

  Hello everyone! We are excited to announce one of the most requested features - Client Script support for Custom Buttons. This enhancement lets you run custom logic on button actions, giving you greater flexibility and control over your user interactions.

• Zoho Mail not working

  Zoho Mail not working

• I can't add a new customer in Zoho invoice? Anyone had this issue before?

  Ive been using Zoho invoice for over 6 years. Today I wanted to add a new customer to send an invoice to but it doesn't save when I try to access it from the pulldown menu when you go to send a new invoice.

• Spreadsheet View click & focus issue in Arabic (RTL) localization

  Hello Zoho Support Team, I am facing an issue in Zoho Creator Spreadsheet View when using Arabic localization (RTL). Scenario: My app supports English (LTR) and Arabic (RTL). I created a Spreadsheet View for a form. In English, everything works correctly.

• Customer address in Zoho Bookings

  Hello,  Is it possible to add customer address information to the Zoho bookings appointment screen? Or have it pull that information automatically from the CRM? We are wanting to use this as a field management software but it is difficult to pull the address from multiple sources when it would be ideal to have a clickable address on the appointment screen that opens up the user's maps.  It would also be advantageous for the "list view" to show appointment times instead of just duration and booking

• Ghost email notification on a form

  Hello, We have recently encountered an error where I can not see a email notification set up for a form which I am currently the owner, although neither the form nor the notification were created by me. However, neither can the Super Admin access the

• bulk edit records and run internal logic

  hi there is few logics in manner "it this than that" logics work well when i edit entry openning it one by one (via workflow "on add/edit - on success" , for custom field "on update/on user input") but when i try bulk edit records - logic does not work.  how can i turn on logic to work as programmed - for mass editing records via bulk edit?

• Next Page