Making Email More Secure: Understanding DKIM and SPF

Imagine you’re sending an important letter to a friend. You write your message, put it in an envelope, and drop it in the mailbox with your address (From Address) and your friend's address (To Address). But what if someone along the way tampers with your letter, changes the contents, or even forges a letter pretending to be you? Your friend might receive a completely different message, or worse, never get it at all.

This is exactly the kind of problem businesses face with email security. Just like traditional letters, emails can be intercepted, modified, or forged. To protect email communication, organizations use two important security measures: DKIM (DomainKeys Identified Mail) and SPF (Sender Policy Framework).

Zylker Techfix encountered a major issue without these security measures : customers weren’t receiving support emails. Some emails bounced back, while others landed in spam folders. Without DKIM and SPF, email providers couldn’t verify whether Zylker’s emails were genuine or forged.

Understanding DKIM

Like official letters have signatures or company seals to prove authenticity, DKIM (DomainKeys Identified Mail) does the same for emails.

DKIM : The Signature Seal for Emails

• DKIM attaches a cryptographic signature to every email you send.
  
• When the recipient’s email service (like Gmail, Outlook, or Yahoo) gets the email, it checks this signature against your company’s domain records.
• If the signature matches, the email is verified as authentic and delivered safely.
• If the signature is missing or doesn’t match, the email might get rejected or marked as spam.
  

Adapting Custom SMTP for Public Domains

Using email forwarding and two-factor authentication, Zylker Techfix used public domains like Microsoft and Google with Zoho SMTP. Configuring DKIM was not the solution in this case; instead, the Custom SMTP setup within Zoho Desk resolved the issue. To further enhance security, they could enable Custom SMTP OAuth for a passwordless configuration.

Why did Zylker Techfix Implement DKIM?

Zylker Techfix used organization-level email addresses from a domain procured through their official website. These addresses were used by different departments. However, they faced email bounces due to authentication failures when sending messages via Zoho’s servers. This disrupted their customer support services, as bounced emails prevented ticket creation.

To resolve this, they enabled DKIM authentication in Zoho Desk. The setup was simple:

1. Added the DKIM public key as a TXT record in their DNS settings.
2. Verified the key using the "Verify" option in Zoho Desk.
3. Ensured all outgoing emails carried the DKIM signature to authenticate email communications.

By enabling DKIM, Zylker Techfix significantly improved email deliverability, reduced email tampering, and prevented spoofing.

Understanding SPF

Now imagine you’re sending the package to your friend through a trusted courier service like FedEx or UPS. If someone tries to deliver a fake package using their branding, the courier service will refuse to accept it.

SPF (Sender Policy Framework) works in the same way—it ensures that only authorized mail servers can send emails on behalf of your domain.

SPF: The "Authorized Courier"

• SPF acts as a list of trusted email servers that are allowed to send emails from your domain.
• When an email is received, the recipient's email provider checks whether it came from an authorized server.
• If the email comes from a trusted source, it is delivered; else it is rejected or marked as spam.

How did Zylker Techfix implement SPF?

Set up SPF by specifying specified email services as their authorized email senders.

To improve security, Zylker Techfix set up SPF records to tell email providers:

"Only emails sent from Authorized email servers should be considered legitimate. If an email comes from another server, don’t trust it!"

The Benefits

Setting up SPF prevented spam, fraudulent emails, and email spoofing while ensuring better email deliverability. 

After implementing DKIM and SPF, email deliverability improved, customers received emails without issues, and communication became more secure and professional.

Final Thoughts for Every Business

Whether you’re a small startup or a large enterprise, email security matters. Without DKIM and SPF, your business risks lost emails, email spoofing or tampered messages. 

Enable DKIM and SPF today!

• Topic Participants

• Lydia | Zoho Desk

  

• Sticky Posts

• Register for Zoho Desk Beta Community

  With the start of the year, we have decided to take a small step in making the life of our customers a little easier. We now have easy access to all our upcoming features and a faster way to request for beta access. We open betas for some of our features

• Share your Zoho Desk story with us!

  Tell us how you use Zoho Desk for your business and inspire others with your story. Be it a simple workflow rule that helps you navigate complex processes or a macro that saves your team a lot of time; share it here and help the community learn and grow with shared knowledge. 

• Tip #1: Learn to pick the right channels

  Mail, live chat, telephony, social media, web forms—there are so many support channels out there. Trying to pick the right channels to offer your customers can get pretty confusing. Emails are most useful when the customer wants to put things on record. However, escalated or complicated issues should not be resolved over email because it's slow and impersonal.  When you need immediate responses, live chat is more suitable. It's also quick and convenient, so it's the go-to channel for small issues. 

• Welcome to Zoho Desk Community - Say hello here!

  Hello everyone! Though we have been here for a while, it’s time to formally establish the Zoho Desk Community; we’re really happy to have you all here! This can be the place where you take a moment to introduce yourself to the rest of the community. We’d love to hear all about you, what you do, what company or industry you work for, how you use Zoho Desk and anything else that you will like to share! Here’s a little about me. I am Chinmayee. I have been associated with Zoho since 2014. I joined here

• Webinar 1: Blueprint for Customer Service

  With the launch of a host of new features in Zoho Desk, we thought it’ll be great to have a few webinars to help our customers make the most of them. We’re starting off with our most talked about feature, Blueprint in Zoho Desk. You can register for the Blueprint webinar here: The webinar will be delivered by our in-house product experts. This is a good opportunity to ask questions to our experts and understand how Blueprint can help you automate your service processes. We look forward to seeing

• Recent Topics

• Create custom rollup summary fields in Zoho CRM

  Hello everyone, In Zoho CRM, rollup summary fields have been essential tools for summarizing data across related records and enabling users to gain quick insights without having to jump across modules. Previously, only predefined summary functions were

• Download a file from within a zoho creator widget

  I have a widget running in Zoho Creator , it displays uploaded documents in a table file, and I have added a download link in the view. ( The widget is created with html, css and javascript). I do not succeed in getting the download working. Do I have

• Taxes for EU B2B Transactions

  Currently, ZC doesn't seem to have a procedure for validating VAT numbers of businesses purchasing in another EU state, and removing local VAT is valid. This is essential for all inter EU B2B trade.

• Unable to Receive Emails on Zoho Mail After Office 365 Coexistence Setup – Error: 553 Relaying Disallowed

  Hello, My domain name is bigniter.com, and I’ve been using Zoho Mail as my email service provider without any issues. Recently, I followed the steps outlined in the Zoho documentation to enable Coexistence with Office 365: 🔗 https://www.zoho.com/mail/help/adminconsole/coexistence-with-office365.html#multi-server

• Enhance Sign CRM integration

  Hello all, I'm working on a custom Deluge script to enhance the integration between Zoho CRM and Sign by using a writer merge template for additional flexibility. I want to replicate the post-sign document integration that exists between CRM and Sign

• CRM Related list table in Zoho analytics

  In Zoho Analytics, where can I view the tables created from zoho crm related lists? For example, in my Zoho CRM setup, I have added the Product module as a related list in the Lead module, and also the Lead module as a related list in the Product module.

• Candidate Registration/Invitation

  It would be great to include the 'invite' candidate functionality into some of the automation functions - ether through a custom function trigger or webhook or accessible through an email template.  Currently there is no way to add this functionality into any workflows or blueprint steps which, I find limits the ability to invite candidates to engage with us directly through our candidate portal. 

• [Free Webinar] Learning Table Series - Creator for Infrastructure Management | A Partner-driven collaborative session

  Hello Everyone! We’re excited to invite you to another edition of Learning Table Series, where we showcase how Zoho Creator empowers industries with innovative and automated solutions. About the Learning Table Series The Learning Table Series is a free,

• Where we can change the icon in social preview

  Hi, we changed our logo, and the image that appear in preview (ex : when we post a appointment link somewhere) is still our old logo. I did change our logo in the org setting. https://bookings.zoho.com/app/#/home/dashboard/settings/basic-info?clview=false

• Cadences

  I have just started using Cadences for follow-up up email pipeline. Is it just me or do you find the functionality very basic? For example, it will tell me (if I go looking for it) if someone has replied to a follow-up and been unenrolled; but it won't

• I have error AS101 when I try to add paypal@mydomain.com to Zoho

  Please help me with this. I tried to call the help line 4 times but don't get any response.

• VAT on Multiple Expenses

  Firstly, might I say I am based in Ireland, and I'm not an accountant, and therefore my understanding of procedures could be somewhat limited. Scenario. An employee pays for items throughout a month, and therefore their claim for expenses includes multiple items - some of the items are VAT deductible (eg, an IT product) and some are not (eg, a client lunch). Discovery The odd thing in ZBooks, is that whilst it seems possible to add a VAT rate to a one-off item of expense, it is not possible to add

• Detect and ignore bots in visitors

  The SalesIQ visitor numbers are basically useless to us because there is no bot detection. We get the same bots coming in from the same countries looking at the same pages every day. It can't be that difficult to tell the difference between an actual

• Agent assignment filter?

  Godo day, We are starting to play with FSM to see if it's going to work for our needs. Now so far we have found that it's very restrcitve in the field department you you have layout rules or can't even hide fields depending on the users roles. We can't

• Default tax type for mileage?

  Where we are, mileage includes a government tax. Is there any way to set a default tax for the Personal Car Mileage category of expense? (Or any other way?)

• DKIM Now Mandatory - Changes to Zoho Forms Email Policies

  Hello Zoho Forms Users, This post is to inform you about an important update regarding the authentication of all email domains in your Zoho Forms account. This year, we are doubling down on our commitment to deliver a secure, seamless, and empowering

• All new Address Field in Zoho CRM: maintain structured and accurate address inputs

  The address field will be available exclusively for IN DC users. We'll keep you updated on the DC-specific rollout soon. It's currently available for all new sign-ups and for existing Zoho CRM orgs which are in the Professional edition. Managing addresses

• In arattai received message can't be deleted

  The issue has been noticed in following: arattai app (Android) arattai app (Window) arattai web While the message posted by me may be deleted, the ones received from others can't be. The item <Delete> change to <Report> when the message is a received

• is it possible to add more than one Whatsapp Phone Number to be integrated to Zoho CRM?

  so I have successfully added one Whatsapp number like this from this User Interface it seems I can't add a new Whatsapp Number. I need to add a new Whatsapp Number so I can control the lead assignment if a chat sent to Whatsapp Phone Number 1 then assign

• Kiosk Page Refresh

  We have a Kiosk running from a button in contacts to update values and also add related lists, which works great, but when the kiosk is finished the page does not refresh to show the changes. Is there a way to force the contact to refresh/update when

• Tips & tricks: Make SalesIQ automations work for you

  Every day, thousands of visitors land on your website. Some browse, some buy, and some leave without a word. But, wouldn’t it be great if you could automatically know who’s interested, engage them at the right moment, and never miss a lead, and all this

• Add Custom Reports To Dashboard or Home Tab

  Hi there, I think it would be great to be able to add our custom reports to the Home Tab or Dashboards. Thanks! Chad

• Finding missing records

  I have a challenge and I am not really sure where to start with it. I can't find any similar threads on here, can anyone help: I have two forms, FormA and FormB. Both forms have records that contain a field called Job_Number. What I am trying to achieve

• Digest Octobre - Un résumé de ce qui s'est passé le mois dernier sur Community

  Chers utilisateurs, Faisons le point sur les temps forts du mois d'octobre au sein de notre Community Zoho France. Partager des informations sensibles, comme des mots de passe, peut vite devenir compliqué et risqué. Les données circulent par email ou

• How do I fully delete a user account

  Hi, I have two old accounts on my CRM which are inactive and show as 'Closed' in the list of users. BUT they are basically still there. How do I fully delete these accounts? They appear in some parts of CRM still such as the on the contact record emails

• Automatically Add Recurring Zoho Meeting Events to Zoho Calendar / Zoho Meeting Calendar

  Hello Zoho Meeting Team, Hope you are doing well. We would like to request an enhancement regarding recurring meetings created inside Zoho Meeting. At the moment, when we schedule a recurring meeting in Zoho Meeting, it does not appear in Zoho Calendar

• Credit Management: #6 Tackling Common Mistakes in Credit Based Billing

  Businesses extend credit to build relationships, make buying easy, and drive more sales. But somewhere between extending and collecting, things begin to slip. A few late payments here and there, an overlooked invoice, and a backlog make cash flow feel

• Tasks Statuses

  Hi, The task status "Completed" is a final status which closes the task. We need to have a status "Cancelled". However, when the status is set to "Cancelled", the task prompt still has a blue button to Close Task. When the customer clicks that and closes

• Updating Blueprint stage from my Deluge function

  Hi all, I need to update the blueprint stage. Its almost working, but ONLY if the current Deal stage is 'Closed Lost'. On any of my custom stages that Ive specified in the pipeline it doesnt work! My code: dealmap = Map(); deal_stage = deal.get("Stage");

• Good news! Calendar in Zoho CRM gets a face lift

  Dear Customers, We are delighted to unveil the revamped calendar UI in Zoho CRM. With a complete visual overhaul aligned with CRM for Everyone, the calendar now offers a more intuitive and flexible scheduling experience. What’s new? Distinguish activities

• Canvas: is it possible to have a fixed header?

  Hello. Does Canvas provide the option to have a fixed header, similar to the standard view? It would also be interesting for other parts of the interface, like the header or sidebar of the tab section. Thanks!

• Replacing email ID,

  In zoho sheets If I am sending it as an email attachments can I replace sender email ID from notifications to my email ID.

• Empowered Custom Views: Cross-Module Criteria Now Supported in Zoho CRM

  Hello everyone, We’re excited to introduce cross-module criteria support in custom views! Custom views provide personalized perspectives on your data and that you can save for future use. You can share these views with all users or specific individuals

• Limited layout rules in a module

  There is a limit of 10 layout rules per module. Is there a way to get that functionality through different customization or workflow + custom function (easily accessible), etc. Having just 10 is limiting especially if module contains a lot of data. Are

• Introducing Lead Capture: Empower exhibitors to capture leads effortlessly

  Events provide a great opportunity for exhibitors to generate awareness and engage with potential customers. Efficiently distributing attendee information to exhibitors through a seamless and secure way is of paramount importance. Introducing Lead Capture

• dealing with post dated cheques

  Hi, can you help me please the best way to deal with this We sell an item of three months duration that is paid for with post dated cheques in monthly stages example - item is sold £3000 Cheque 1 is for £1000 due at time of sale (say Sept) cheque 2 is dated 25th of next month (Oct) cheque 3 is dated 25th of next month +1 (Nov) Now, with invoice number one it's simple - i send a standard invoice as usual But with the other two here's what i want zoho to do next month i want it to send an invoice on

• Using Contains as a filter

  We are using Zoho Reports, ServiceDesk Plus analytics. I do not see how to create a report filter using Contains comparison of a string values, is one string contained in another. For example, Task Title contains the word Monitor. Is this possible in Zoho Reports?  This reporting feature is available in SDP reporting. Thanks in advance, Craig Rice

• Mass import of documents into Zoho Writer

  I'm using Google's word processor at the moment but feel that Zoho does a better job (on the online apps market). Iwant to move my documents (about 50-70) to Zoho but it seems to me that I have to import them seperately. Is it already possible to upload several documents at a time or is this a forthcoming feature? Cheers Rolli :?:

• Set off Unearned Revenue

  Hi, I would like to get a clarification on the below. I have an opening balance of BD.725/- in my Unearned Revenue A/c which includes the overpayments of 6 clients. No One of my clients settled his invoices by paying the value of the invoice less the

• How Zoho Desk contributes to the art of savings

  Remember the first time your grandmother gave you cash for a birthday or New Year's gift, Christmas gift, or any special day? You probably tucked that money safely into a piggy bank, waiting for the day you could buy something precious or something you

• Next Page