What does this page cover
Learn how to configure and manage outgoing email channels in Zoho Creator. Outgoing email channels determine the email service used to deliver emails in Creator applications. You can authenticate your domain in Creator's built-in email channel to ensure emails are trusted and not marked as spam. You can also configure third-party channels, such as Zoho CPaaS, Microsoft Outlook, Gmail, and Custom SMTP, for greater flexibility and seamless integration with your existing email infrastructure.
Availability
- The built-in email channel is available in all plans, including the Free plan. Domain authentication is available in all paid plans.
- Zoho CPaaS, Microsoft Outlook, Gmail, and Custom SMTP channels can be configured in all paid plans.
- Only the super admin can configure and manage email channels.
1. Configuring Outgoing Email Channels
Choose from multiple outgoing email channels based on your setup requirements.
- Built-in Email: This is the default email channel with no setup required. Send emails directly from Creator using the platform’s built-in service.
- Zoho CPaaS: A transactional email service that can be integrated with Creator using basic credentials.
- Third party Email (Microsoft Outlook and Gmail): Requires a Client ID and Client Secret from your application credentials. These channels use OAuth 2.0 for authorization.
- Custom SMTP: Connects to any email service provider or your own mail server using the SMTP protocol.
Multiple email channels can be configured, but only one can be active at a time through which emails will be routed.
- Built-in Email
- Zoho CPaaS
- Microsoft Outlook
- Gmail
- Custom SMTP
2.1 Built-in Email
Zoho Creator's active email channel by default, ready to use without any additional setup. Organizations can configure custom authentication to maintain domain identity and brand visibility for their end users.
Note: If an active email channel configuration is deleted, the built-in email channel automatically becomes the active outgoing email channel, preventing disruptions to email delivery.
Once an
email address is added and verified under the
Sender Emails tab, its associated domain is automatically listed under the
Built-in Email channel with its
Verification Status marked as
Completed. You can then authenticate these domains to strengthen your brand identity and build trust with recipient servers, ensuring emails sent from your domain are recognized as legitimate and not flagged as spam.
Authenticating a verified domain in Zoho Creator
Note: Custom domain authentication is recommended, as it ensures emails are sent from your own domain address rather than a Zoho Creator shared address, and reduces the likelihood of emails being flagged as spam by recipient servers. If not configured, emails are routed through Zoho Creator's shared domain.
Learn more
To authenticate a verified domain:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Manage Domains on Built-in Email card inside the Outgoing Email Channels, the tab you land on by default.

- Click Validate on the required domain's detail card.

- Locate the SPF and DKIM records in the Domain Authentication pop-up and click Copy next to each record. Paste the values in your domain provider’s DNS settings and ensure the records are added exactly in the format specified in the popup. This makes sure emails are sent from authorized servers and approved by the domain owner.

- To configure SPF, publish it as a TXT record in your DNS provider such as your domain registrar or DNS manager.
- Click Validate in Zoho Creator after adding the SPF and DKIM records in your domain provider’s DNS settings. Once the DNS configurations are verified:
- The domain's Authentication Status will be updated to Completed.
- The domain's Status will be set to Active.
Note: When working with DNS records, keep the following in mind:
- SPF (Sender Policy Framework): SPF is an email authentication method that helps prevent emails from being rejected or marked as spam. SPF records must be added in the following format:
- For single SPF records, paste: v=spf1 include:usermail.zohocreator.com ~all
- For multiple SPF records, update the SPF record with: include:usermail.zohocreator.com instead of creating a new entry.
- DKIM (Domain Keys Identified Mail): DKIM is an email authentication method that uses A, MX, TXT, or CNAME record with public and private keys to verify emails.
- If DKIM is configured, the domain associated with each email is validated.
- If the DKIM validation fails, the email is either quarantined or rejected, based on your domain’s DMARC policy.
2.2. Zoho CPaaS configuration
Zoho CPaaS can be configured to send transactional emails through Zoho's dedicated email delivery service. It provides delivery monitoring, email activity tracking, and additional controls for managing high-volume email communication.
To configure Zoho CPaaS as an email channel:
- Click Operations in the left pane, select Email Management under APPLICATIONS.
Alternatively, you can also head over to the System Integration present under Operations directly and select Zoho CPaaS.

- Click Configure under Zoho CPaaS to initiate the integration.

- Creator verifies whether the email address of the super admin is associated with a Zoho CPaaS account. Based on the verification result, if the email address is:
- Not associated with a Zoho CPaaS account, click I understand, Create to create a new Zoho CPaaS account and associate it with your Creator account.

- Associated with a Zoho CPaaS account, click I understand, Associate to link your existing email address from a Zoho CPaaS account to your Creator account.

- Review the mail agent details for your Zoho CPaaS account and click Continue. In Zoho CPaaS, a mail agent is used to organize and manage email sending configurations.

- Note: During the integration process, a mail agent named Creator Default is automatically created and set as the default mail agent. You can change the default mail agent later from the Zoho CPaaS settings in Creator.
- Add and verify all domains configured in your Built-In Email channel in your Zoho CPaaS account. Sender emails whose domain is not authenticated in Zoho CPaaS will be unable to send emails after the switch. Once done, click Proceed.

- Click Finish at the bottom of the page to save the configuration and receive Zoho CPaaS credits based on your Creator plan on a monthly basis. Track your email credits under Subscription in Zoho CPaaS, which determine your email sending limit for the Zoho CPaaS channel.

Once the association is completed, you can view the analytics by clicking the View Analytics button in the page.
Activating the Zoho CPaaS channel automatically switches your account to the credit-based email system. Based on your existing price plans in Creator, the following credits will be made available:
- Standard plan: 1 credit per 5 users, with a maximum of 5 credits.
- Professional plan: 1 credit per 3 users, with a maximum of 10 credits.
- Enterprise plan: 1 credit per 2 users, with a maximum of 15 credits.
To send more than 100 emails per day from Creator using the Zoho CPaaS channel, complete the KYC process in your Zoho CPaaS account.
DMARC and sender verification
DMARC is an email authentication protocol that works along with
SPF & DKIM to help protect your domain from unauthorized email usage and spoofing.
If DMARC is enabled for a sender domain, the sender email addresses associated with that domain will be imported into Zoho CPaaS from Creator in an unverified state during the integration process. To use those email addresses for sending emails, you must first
verify the domain in Zoho CPaaS. The domains that were previously verified in Creator will become invalid after association with Zoho CPaaS and must be added and verified again in Zoho CPaaS.
Sender email addresses that were previously verified while DMARC was disabled will also be marked as unverified after import in Creator during the integration process.
After configuration, admins can perform the following additional actions from the Zoho CPaaS interface:
- Email tracking: Enable email tracking to monitor open rates, click-through rates, and other recipient activities for your emails.
- Processed emails: Access logs of processed emails to track and monitor their delivery status and other relevant information.
- Webhooks: Utilize webhooks to receive real-time notifications for your email activities.
- Bounce addresses: Set up custom bounce addresses to handle undelivered emails more effectively.
Dissociate Zoho CPaaS
To dissociate Zoho CPaaS:
- In the Zoho CPaaS page, click on the Click here link to dissociate the existing Zoho CPaaS integration with your Creator account.

- Click the Yes, Dissociate button in the popup that appears. If you wish to enable it back, you can follow the steps under steps to enable Zoho CPaaS.
- For old users, when dissociating the following message will be shown-

- For new users, the following message will be shown-

Note: Once you dissociate your Creator account from Zoho CPaaS,
- All the emails will be reverted back to daily limits based on your Creator account's subscription plan.
- Tracking emails, bounce address, and logs of emails will not be available anymore.
- All the domains that were verified earlier will have to be re-verified again.
2.3 Microsoft 365 configuration
You can use the Microsoft 365 channel to route emails through Microsoft's email service. This channel supports apps registered for single-tenant, multiple Entra ID tenants, and any Entra ID tenant with personal Microsoft accounts.
To configure Microsoft 365 email channel:
- Click Operations in the left pane under MANAGE and select Email Management under Applications.

- Click Configure on the Microsoft 365 card under Outgoing Email Channels, the tab opened by default.

- Copy the Callback URL from Creator and paste it as a Redirect URI when registering your application in the Microsoft 365 portal.

Provide the Client ID, Client Secret, and Tenant ID, generated in the Microsoft 365 portal while registering your application under Identity > Applications > App registrations.
Note: To send emails using the designated Microsoft 365 account, Authenticated SMTP needs to be enabled. To enable Authenticated SMTP:
a) Click Active Users under Users in Microsoft 365 Admin portal.
b) Select the required user, and click Mail.
c) Select Manage email apps in the Email apps section.
d) Tick the checkbox next to Authenticated SMTP and click Save.

- Click Save & Authorize in Creator.
- Enter the Username, which is the email address used to sign in to your Microsoft 365 account.

- Click Authorize. You will be redirected to a new tab to log in to your Microsoft 365 account in order to complete the authorization. Once authorized, the channel configuration will be complete. Learn how to activate this channel to route outgoing emails through it.
Note: Sender email addresses added in this channel must be configured as alias addresses in the connected Microsoft 365 account before they can be used for email delivery. Learn how to add the sender email address as an alias in Microsoft 365.2.4 Microsoft Outlook configuration
You can use Microsoft Outlook channel to route emails through Microsoft's email service. This channel only supports apps registered under the personal Microsoft account type. To configure Microsoft Outlook email channel:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Configure on Microsoft Outlook card within the Outgoing Email Channels, the tab you land on by default.

- Copy the Callback URL from Creator and paste it as a Redirect URL in the Microsoft Azure portal when registering your application.

- Provide the Client ID and Client Secret details, which were generated while registering your application in the Microsoft Azure portal under Identity > Applications > App registrations.

- Click Save & Authorize in Creator.
- Enter the Username, which is the email address used to sign in to your Microsoft Outlook account.

- Click Authorize. You will be redirected to a new tab to log in to your account in order to complete the authorization. Once authorized, the channel will be saved. Learn how to activate this channel to route outgoing emails through it.
Note: Sender email addresses added in this channel must be configured as alias addresses in the connected Outlook account before they can be used to send emails. Learn how to add the sender email address as an alias in
Microsoft Outlook.
2.5 Gmail configuration
You can use the Gmail channel to route emails through Google's email service.
To configure the Gmail email channel:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Configure under Gmail card under the Outgoing Email Channels, the tab you land on by default.

- Copy the Callback URL from Creator and paste it under Redirect URLs in Google cloud console during the registration process.

- Provide the Client ID and Client Secret details, which were generated while creating OAuth credentials in the Google Cloud Console.

- Click Save and Authorize in Creator.
- Enter the Username, which is the email address used to sign in to your Gmail account.

- Click Authorize. You will be redirected to a new tab to log in to your account in order to complete the authorization. Once authorized, the channel will be saved. Learn how to activate this channel to route outgoing emails through it.
Note: Sender email addresses added in this channel must be configured as alias addresses in the connected Gmail account before they can be used to send emails. Learn how to add the sender email address as an alias in Gmail.
2.6 Custom SMTP Configuration
A Custom SMTP server (Simple Mail Transfer Protocol) allows you to send emails through any third-party email server. You can choose this option when you need to use a specific email provider that aligns with your business requirements.
To configure a Custom SMTP server:
- Navigate to Operations in the left pane and select Email Management under APPLICATIONS.

- Click Configure under Custom SMTP card under the Outgoing Email Channels, the tab you land on by default.

- Provide the Hostname and Port Details, which can be obtained from your email server.
- Select the security protocol configured for or supported by your SMTP from the dropdown: SSL, TLS, or None.

- Choose the required authentication type: None, Basic, OAuth 2.
Proceed based on the authentication type: - If None is selected:
- Click Save to complete the configuration.
- Note: If None is the authentication type, make sure your SMTP server supports unauthenticated email submission. Otherwise, email delivery may fail.
- If Basic authentication is selected:
- Click Save to save configuration till now.
- Provide the Username and Password used to authenticate your SMTP server, the username is the email address associated with your account.

- Click Authorize and complete authorization.
- If OAuth 2 is selected:
- Provide the Client ID and Client Secret, which are obtained by registering with the email server.

- Provide the Authentication URL, Token URL, Refresh Token URL, and Revoke Token URL, obtained from your provider.
- Provide the required scopes, which define the level of access your application needs from the email server.
- Select a delimiter between Space, Comma and Plus to define how multiple scopes are separated.
- Provide the Expiry Time, specified by your provider.
- Click Save & Authorize to complete and save the configuration.
3. Managing Email Channels
3.1 Activate channel
Built-in Email is activated by default and only one email channel can remain active at a time. When a new channel is activated, the previously active channel automatically becomes inactive.
To activate any other email channel:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Manage Domains for the Built in Email channel or Configure for other channels under the Outgoing Email Channels, the tab you land on by default.
- Click the ellipsis icon in the top-right corner, then select Activate.

Once the channel is activated, all ongoing emails will be redirected through the newly activated channel moving forward.
3.2 Send test email
Once an email channel is configured or a domain is added in the built-in channel, send a test email to verify the configuration is working correctly. Refer to the checklist beforehand to ensure a successful delivery.
To send a test email:
Click Email Management under Applications in the Operations Module.
Select the desired email channel in the Outgoing Email Channel tab. Ensure <the email channel is configured> before proceeding to test it.
Click Send Test Email in the top-right corner.
In the Send Test Email popup, fill in the following:
From Email Address: Select a verified, active <sender email address> height=“2.618522528433946in”}
To Email Address: Enter a valid recipient email address
Subject & Body: The content in these fields will be used in the test mail. Edit the pre-filled content as per your requirement.
Click Send.
Once the test email is received, it confirms that the email channel is configured correctly. If not, go through <the checklist> and try again after making the required changes.
3.3 Edit Channels
Editing the configuration is available for third-party channels (Gmail, Outlook, and Custom SMTP). Editing an active channel's configuration may cause temporary disruptions to email delivery; ensure the process is completed promptly to minimize downtime.
To edit a channel configuration:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Manage Domains for the Built in Email channel or Configure for other channels under the Outgoing Email Channels, the tab you land on by default.
- Select Edit in the top-right corner. Update the required details and click Save.

3.3 Reauthorize Channels
Reauthorization is available for third-party channels (Gmail, Outlook, and Custom SMTP). Reauthorizing an active channel may cause temporary disruptions to email delivery; ensure the process is completed promptly to minimize downtime.
To reauthorize a channel:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Manage Domains for the Built in Email channel or Configure for other channels under the Outgoing Email Channels, the tab you land on by default.
- Click the ellipsis icon in the top-right corner and select Reauthorize. You will be redirected to a new tab to log in and complete the authorization. Once authorized, the channel configuration will be saved.

3.4 Activate or deactivate a domain in Built-in Email
The email channel controls how emails are sent, while the active domain determines the sender domain used for emails sent through the Built-in Email channel.
When a domain is deactivated, emails configured to use that domain will be routed through the Built-in Email channel.
To activate or deactivate a domain:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Navigate to the Built-in Email tab under the Outgoing Email Channels, the tab you land on by default.

- Locate the required domain.
- Switch the Active/Inactive toggle based on your requirement for the domain.
3.5 Revoke authorization
When you revoke the authorization of an email channel, the current OAuth credentials are removed from it. The channel configuration is saved, but email delivery will be stopped until the channel is reauthorized if it is the active channel.
Revoking authorization is available for all channels except Built-in Email channel.
Note: The Built-in Email channel is managed by Zoho Creator and does not require separate authorization.
To revoke channel authorization:
- Click Operations in the left pane of Zoho Creator homepage and select Email Management under Applications.

- Click View Configuration on the required channel's card under Outgoing Email Channels tab, which is selected by default.

- Click the Revoke icon (
) next to Authorized Account in the left pane of the email channel's detail view and click Revoke. If the channel is currently active, an additional warning is shown.

Once the authorization is revoked, the connection between the
Authorized Account and the email channel is severed, and the
Authorized Account status is displayed as
Not Connected. To resume email delivery,
reauthorize the channel or
configure and
activate another channel.
3.6 Delete a domain in Built-in Email
You may choose to delete a domain’s authentication if you no longer want to use it for sending emails. This removes the domain’s verified and authenticated status, so it can no longer be used as a sender in the Built-in Email.
Note: The domain will still appear in the list, but it cannot be used for sending emails. To remove a domain completely, you must delete all verified sender email addresses associated with it.
To delete a domain:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Navigate to the Built-in Email tab under the Outgoing Email Channels, the tab you land on by default.

- Hover over the required domain’s card, click the vertical ellipsis (three-dot) icon at the top-right corner and select Delete.
3.7 Delete channel configuration
You can remove an email channel configuration if it is no longer needed. Removing a configuration permanently deletes all associated setup details from Creator and cannot be restored. The Built-in Email and Zoho CPaaS channels cannot be deleted; however,
domains can be removed in Built-in Email, and
Zoho CPaaS can be disassociated.
Note: Removing an email channel configuration only removes its setup from Creator. The actual email channel account remains unchanged.
To delete an email channel configuration:
- Click Operations in the left pane and select Email Management under APPLICATIONS.

- Click Configure under the card of required channel under the Outgoing Email Channels, the tab you land on by default.
- Click the ellipsis icon located in the top-right corner and select Delete Configuration.

Note: If the deleted channel is currently active, confirm the redirection of all email configurations to the Built-in Email channel to proceed with the deletion. To control how emails are sent after deletion, you can
configure and
activate a different channel before deleting the current active channel configuration.
4. Points to note
- Only one email channel can be active at a time. Activating a new channel affects only future outgoing emails; previously delivered emails and email records remain unchanged.
- When an active email channel configuration is deleted, the Built-in Email channel automatically becomes the active outgoing email channel, preventing disruptions to email delivery.
- For email channels other than Built-in Email, sender email addresses added in Creator must also exist as alias addresses or approved sender addresses in the connected email account before they can be used for email delivery.
- Editing the configuration or reauthorizing an active email channel may cause temporary disruptions to email delivery. Ensure all changes are completed promptly to minimize downtime.
- Understanding Email Management
- Managing sender email addresses
Previous step
Before configuring outgoing email channels, ensure you're familiar with
email management, which helps you manage how emails are sent and which sender address is used.