DKIM Now Mandatory - Changes to Zoho Forms Email Policies

Hello Zoho Forms Users,

This post is to inform you about an important update regarding the authentication of all email domains in your Zoho Forms account. This year, we are doubling down on our commitment to deliver a secure, seamless, and empowering experience for you.

To ensure your form notifications consistently reach their destination, Zoho Forms has updated its email authentication requirements. In alignment with global security standards from major providers like Google and Yahoo, we have implemented strict protections against unauthenticated mail.

Updated Authentication Requirements

To prevent your emails from being blocked:

All senders must configure DKIM to your domain.
Bulk Senders (5k+ emails/day) must configure both DKIM and DMARC.

What has Zoho Forms changed?

To protect your sender reputation and ensure high deliverability, Zoho Forms now restricts the use of public and unverified domains for emails.

Public Domain Restriction: You can no longer save email templates using a public "From" address (e.g., @gmail.com, @outlook.com, @yahoo.com).

Unverified Domain Restriction: Custom business domains must be DKIM verified before they can be used in the "From" address.

Why is this change necessary?

If your emails are unauthenticated, mail servers cannot verify your identity. This results in the following risks:

Issue	Consequence
Using Public Domains	Emails from @gmail.com or @yahoo.com sent via Zoho Forms are now instantly blocked or flagged as phishing by most receivers.
Unverified Custom Domain	Without DKIM, your emails lack an authentication, causing them to be sent directly to spam or rejected by most receivers.
No DMARC (Bulk)	If you send over 5,000 emails a day without DMARC, mail servers will permanently reject your emails to protect their users.

Required Actions for all Senders

Using public domains (such as Gmail, Yahoo, Outlook)
If you do not have a custom domain and are using a public domain such as gmail as your domain for the From address, you must change your "From" address to the Zoho Forms Default Address for your region:

Data Center	Zoho Forms' Default Email Address
US	notifications@zohoforms.com
EU	notifications@zohoforms.eu
IN	notifications@zohoforms.in
JP	notifications@zohoforms.jp
CN	notifications@zohoforms.com.cn
AU	notifications@zohoforms.com.au
CA	notifications@zohoforms.ca
SA	notifications@zohoforms.sa

Authenticate your custom domain via DKIM

All email senders are required to ensure authentication of their email-sending domains with DKIM. This is a mandatory step to use your organization's custom domains to send emails.
DKIM is now enabled in Zoho Forms' Free plan. Users with their own custom domains are required to configure DKIM to prevent their emails from being flagged as spam. Learn about DKIM configuration in Zoho Forms.

Need Assistance?

We are here to help you through this transition. If you have questions or need assistance, please reach out to us at support@zohoforms.com.