How can org admins configure SPF and DKIM records for domains in Writer
Overview
Email authentication protocols like DMARC (Domain-based Message Authentication, Reporting, and Conforming), DKIM (DomainKeys Identified Mail), and SPF (Sender Policy Framework) are vital for preventing phishing attacks and maintaining a good sender reputation.
- DMARC standardizes how email receivers verify incoming mail and provides feedback to senders, helping to prevent unauthorized use of your domain.
- DKIM uses cryptographic signatures to verify that an email message was sent from an authorized mail server and hasn't been tampered with. This helps detect forgery and prevents the delivery of harmful emails like spam.
- SPF specifies which mail servers are authorized to send email on behalf of your domain, helping to detect forged sender addresses.
When DKIM is configured for your domain in Zoho Writer, it ensures secure email delivery for various operations, including sharing published URLs, sending documents as attachments, and all forms of mail merge. If DKIM isn't configured for your organization's domain, Zoho Writer will default to using
notification@zohowriter.com as the sender address.
Note: DKIM cannot be configured for public domains (like gmail.com, yahoo.com, outlook.com) because you do not have access to their DNS settings. To use DKIM, you must use a custom domain that you own and can manage DNS records for.
Prerequisites
- You must have admin privileges in Zoho Writer to access the Admin Panel and modify domain settings.
- The domain you wish to configure must either be:
- An existing group alias in Zoho Mail.
- A secondary email address in Zoho Accounts.
- If you are a former Zoho Docs user, you must have migrated to Zoho WorkDrive.
Step to add DKIM records
Follow these steps to generate and add DKIM records for your domain:
- Access the Admin Panel:
- In the Zoho Writer editor, click your profile icon in the top-right corner.
- Select the Admin Panel'' option.
- Add Your Mailing Domain:
- In the admin console, click on the 'Configurations' tab on the left pane.
- Then, click the 'Mailing Domains' tab.
Click the 'Add' option to add your mailing domain. It will then appear under the 'Generate DKIM' section.
- Generate DKIM TXT Values:
- Hover over the newly added domain.
- Click the 'Generate DKIM' option.
A dialog box will appear, providing you with the DKIM TXT values (host_name and host_value).
- Update DNS Settings:
- Copy these DKIM TXT values.
- Go to your domain hosting website (e.g., GoDaddy.com, Cloudflare, BlueHost) where you purchased your domain.
Update your DNS settings by adding these TXT records.
- Verify DKIM Configuration:
- Wait for 24-48 hours for the DNS settings to propagate globally.
- After this timeframe, return to the Zoho Writer Admin Console.
- Go to the 'Mailing Domains' tab.
- Click 'Generate DKIM' next to your domain, then click 'Verify'. Your sender domain will be verified once the update is complete.
Steps to add SPF records for your domain
Configuring SPF records involves publishing a TXT record in your domain's DNS settings.
- Determine Your TXT Record:
- The TXT Host/Name and TXT Value for your SPF record will vary based on your domain type and Zoho data center (DC).
- For Main Domains (e.g., zylker.com):
- TXT Host/Name:@ or blank
- TXT Value: Refer to the table below for your respective data center.
- For Sub-domains (e.g., invoice.zylker.com):
- TXT Host/Name: The sub-domain name (e.g., invoice)
TXT Value: Refer to the table below for your respective data center.
Note: You might need to add the complete domain (subdomain.domain.com) or just the sub-domain name, depending on your DNS provider.
Region of Multiple DCs | SPF TXT values |
US | v=spf1 include:zeptomail.net ~all |
EU | v=spf1 include:eu.zeptomail.net ~all |
CN | v=spf1 include:zeptomail.net.cn ~all |
IN | v=spf1 include:zeptomail.net.in ~all |
AU | v=spf1 include:zeptomail.net.au ~all |
CA | v=spf1 include:ca.zeptomail.net ~all
|
SA | v=spf1 include:sa.zeptomail.net ~all
|
JP | v=spf1 include:jp.zeptomail.net ~all |
Publish SPF Record in DNS:
Go to your domain hosting website.
Add a TXT record in your DNS settings using the values determined in the previous step.
Troubleshooting Tips
DKIM Configuration for Public Email Domains
DKIM cannot be configured for public email domains such as gmail.com, yahoo.com, or outlook.com, as these domains do not provide access to their DNS settings.
To enable DKIM, you must use a custom domain that you own and have permission to manage DNS records for.
In cases where a public email address (for example,
xyz@gmail.com) is used as the sender, emails will be sent from
notification@zohowriter.com, and the recipient will see the public email address in the
Reply-To field instead.
Related Articles / Videos