- - - - - - -
Email authentication using SPF and DKIM
Availability: Accounts that have registered using their own domain's email address, and are using Zoho Creator 5
In response to email spoofing — where spammers forge the email's header so that the message appears to have originated from a legitimate source — email hosting services have adopted protocols to authenticate incoming emails. Emails that fail such authentication get marked as spam, and the domain may even be blacklisted by the receiver's email service.
With businesses using a wide range of services for managing their workflows, and emails being a central part of most business communications, it becomes essential to put in place measures that prevent email spoofing and enable the receiver's email service successfully authenticate emails.
To help authenticate the emails sent from your Zoho Creator apps, we're introducing Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM). These'll be available under Email Management in your Account Setup.
Here's how this'll work:
- Verify a sender email address that belongs to your domain.
Upon successful verification, you'll be able to use this as the FROM address in emails triggered from your apps, and your domain will appear in the Domain Authentication tab:

- Authenticate your domain by clicking Validate. You'll be prompted with the SPF and DKIM keys, generated by Zoho Creator, which you must add to your domain's DNS for authentication.
Upon successful authentication, the emails sent from your Zoho Creator apps will contain the DKIM signature in their header.
- - - - - - -
Deprecating "Switch to old version" for new sign-ups
After March 31, 2019, new sign-ups to Zoho Creator will not have the option to switch from Zoho Creator 5 to the previous version.
- - - - - - -