Configuring SPF and DKIM for your Email Domain
SPF and DKIM are fundamental email authentication protocols that can help protect email senders and recipients from spam, phishing, and spoofing. SPF allows your recipients to know whether emails from your domain, are in fact sent by you while DKIM verifies whether the emails are generated, from the authorized servers of the sending domains. Both SPF and DKIM are added as TXT records in your DNS settings.
How SPF works?
At the most basic level, SPF establishes mail servers that you've authorized to send emails. This way, receiving mail servers can validate whether the emails sent by you originated from a server that has permission to send on your behalf. The following steps will describe how SPF works:
- Creating an SPF record: As the domain administrator, you establish a policy that defines which mail servers are authorized to send emails from your domain. This policy is called the SPF record.
- DNS lookup: An incoming email will be verified for the bounce domain in DNS. Then, the inbound mail server will check whether the IP address of the mail sender matches the IP address specified in the SPF record.
- Outcome: Now, based on the rules specified in your domain’s SPF record, the mail server decides whether to deliver, flag, or reject the email message. This ensures that legitimate emails sent from your domain are delivered to your customers.
How DKIM works?
DKIM is an email security standard that allows you to claim responsibility for emails in a way that can be validated by the recipients. This is done using a public key and private key to sign and verify emails sent from your mail server. The following steps will describe how DKIM works:
- As the domain administrator, you publish a public key as a TXT record in the domain’s DNS records.
- When you send an email, the outbound mail server adds a unique digital signature to the email headers. This header will contain two hashes, one of the specified headers, and one of the message body.
- When an inbound mail server receives the email, it checks if a DKIM-Signature field exists in the header.
- If the signature exists, it uses the public key in the DNS to validate the signature. If the two values match, it indicates that the email was indeed sent by you and is unaltered in transit.
Email Domain Authentication Steps
Authenticating your email domain in Zoho Desk is a simple four-step process:
- Add a "From" email address to your Zoho Desk account.
- Copy the SPF and DKIM record values for the "From" email address.
- Go to your domain hosting website's settings page, paste the copied record values, and publish them to the DNS servers.
- After your records are published, verify your domain back in the DKIM verification page inside Zoho Desk.
Step 1: Adding From Email Address
- Click the Setup icon (
) in the top bar.
- Click Email under the Channels menu.
- Select From Address under the Email sub-menu.
- Click New From Address in the top right corner.
- On the New From Address page, do the following:
- Select a Department (when you've more than one) from the drop-down menu.
- Enter the From Address to be used while replying to tickets. For example, support@zylker.com.
- Enter a Friendly Name for your From Address.
- Click Save.
You will receive a verification email to the email address you just added. - Please verify the email address before we proceed to Step 2.
Note:
- DKIM and SPF authentication are not available for "From" addresses that send emails using your own SMTP servers.
Step 2: Copying SPF and DKIM Record Values
- Click the Setup icon (
- Click Email under the Channels menu.
- Select DKIM Authentication under the Email sub-menu.
- On the DKIM Authentication page, do the following:
- Click Verify corresponding to the domain name of your "from" email address.
The DKIM Authentication window opens. - Click the Copy button next to the text records.
You need to create a TXT record with these values in the DNS Manager.
Step 3: Setting up SPF and DKIM records for your domain
- Go to your domain hosting website from where you have purchased your domain (GoDaddy.com, Cloudflare, BlueHost, etc.).
- Paste the Selector Values and the TXT record values copied from your Zoho Desk account in your domain's DNS settings.
- Click Publish.
Note: DNS setup usually updates within 24-48 hours, and your email domain will be verified after the update is complete.
Step 4: Verifying your Email Domain
After the SPF and DKIM records for your email domain have been published on the DNS servers, follow the steps given below:
- Back in Zoho Desk, navigate to the DKIM Authentication page.
- Click Verify corresponding to the domain name whose SPF and DKIM records were published on the DNS servers.
- The DKIM Authentication window opens.
- Click Verify.
If the DKIM records have been validated for the email domain, the domain's status will be changed to Verified.
Note:
- Zoho Desk will look up and verify whether the DKIM TXT records exist in your DNS once every two days.
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Still can't find what you're looking for?
Write to us: support@zohoforms.com
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Bigin?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
Related Articles
FAQs: Email
Can I clone email templates across departments? Creating email templates for multiple departments in Zoho Desk allows you to streamline your communication with customers and agents by providing preconfigured messages tailored to specific needs. ...Setting up your Email Channel
Emails are the most widely used mode of communication for your customers to submit tickets to your Zoho Desk. The emails received from your customers are converted into tickets and assigned a unique ticket ID. All you need to do is to forward the ...Domain Mapping
Provide customer support from your own domain with Zoho Desk. By default, the web address of your Help Center is a Zoho Desk subdomain such as "portalname.zohodesk.com/portal". However, you can personalize this so that your customers can submit their ...Understanding Email Delivery and Bounce
When you need to get an important message to a customer, one of the fastest ways to do it is by email. Despite several new and modern communication techniques, email stays the most preferred channel for customers when they need help from a business. ...Configuring Zoho BugTracker Integration
Efficient issue management is the key to the success of any engineering team. In fact, your customers expect a lot from the software you develop, and they provide the best possible feedback. Unless the bugs (read feedback) are resolved and managed ...