Making Email More Secure: Understanding DKIM and SPF

Making Email More Secure: Understanding DKIM and SPF

Imagine you’re sending an important letter to a friend. You write your message, put it in an envelope, and drop it in the mailbox with your address (From Address) and your friend's address (To Address). But what if someone along the way tampers with your letter, changes the contents, or even forges a letter pretending to be you? Your friend might receive a completely different message, or worse, never get it at all.



This is exactly the kind of problem businesses face with email security. Just like traditional letters, emails can be intercepted, modified, or forged. To protect email communication, organizations use two important security measures: DKIM (DomainKeys Identified Mail) and SPF (Sender Policy Framework).
Zylker Techfix encountered a major issue without these security measures : customers weren’t receiving support emails. Some emails bounced back, while others landed in spam folders. Without DKIM and SPF, email providers couldn’t verify whether Zylker’s emails were genuine or forged.

Understanding DKIM

Like official letters have signatures or company seals to prove authenticity, DKIM (DomainKeys Identified Mail) does the same for emails.

DKIM : The Signature Seal for Emails

  • DKIM attaches a cryptographic signature to every email you send.
  • When the recipient’s email service (like Gmail, Outlook, or Yahoo) gets the email, it checks this signature against your company’s domain records.
  • If the signature matches, the email is verified as authentic and delivered safely.
  • If the signature is missing or doesn’t match, the email might get rejected or marked as spam.

Adapting Custom SMTP for Public Domains

Using email forwarding and two-factor authentication, Zylker Techfix used public domains like Microsoft and Google with Zoho SMTP. Configuring DKIM was not the solution in this case; instead, the Custom SMTP setup within Zoho Desk resolved the issue. To further enhance security, they could enable Custom SMTP OAuth for a passwordless configuration.

Why did Zylker Techfix Implement DKIM?

Zylker Techfix used organization-level email addresses from a domain procured through their official website. These addresses were used by different departments. However, they faced email bounces due to authentication failures when sending messages via Zoho’s servers. This disrupted their customer support services, as bounced emails prevented ticket creation.
To resolve this, they enabled DKIM authentication in Zoho Desk. The setup was simple:
  1. Added the DKIM public key as a TXT record in their DNS settings.
  2. Verified the key using the "Verify" option in Zoho Desk.
  3. Ensured all outgoing emails carried the DKIM signature to authenticate email communications.
By enabling DKIM, Zylker Techfix significantly improved email deliverability, reduced email tampering, and prevented spoofing.

Understanding SPF

Now imagine you’re sending the package to your friend through a trusted courier service like FedEx or UPS. If someone tries to deliver a fake package using their branding, the courier service will refuse to accept it.
SPF (Sender Policy Framework) works in the same way—it ensures that only authorized mail servers can send emails on behalf of your domain.

SPF: The "Authorized Courier"

  • SPF acts as a list of trusted email servers that are allowed to send emails from your domain.
  • When an email is received, the recipient's email provider checks whether it came from an authorized server.
  • If the email comes from a trusted source, it is delivered; else it is rejected or marked as spam.

How did Zylker Techfix implement SPF?

Set up SPF by specifying specified email services as their authorized email senders.
To improve security, Zylker Techfix set up SPF records to tell email providers:
"Only emails sent from Authorized email servers should be considered legitimate. If an email comes from another server, don’t trust it!"

The Benefits
Setting up SPF prevented spam, fraudulent emails, and email spoofing while ensuring better email deliverability. 
After implementing DKIM and SPF, email deliverability improved, customers received emails without issues, and communication became more secure and professional.

Final Thoughts for Every Business
Whether you’re a small startup or a large enterprise, email security matters. Without DKIM and SPF, your business risks lost emails, email spoofing or tampered messages. 
Enable DKIM and SPF today!






      • Sticky Posts

      • Register for Zoho Desk Beta Community

        With the start of the year, we have decided to take a small step in making the life of our customers a little easier. We now have easy access to all our upcoming features and a faster way to request for beta access. We open betas for some of our features

      • Share your Zoho Desk story with us!

        Tell us how you use Zoho Desk for your business and inspire others with your story. Be it a simple workflow rule that helps you navigate complex processes or a macro that saves your team a lot of time; share it here and help the community learn and grow with shared knowledge. 

      • Tip #1: Learn to pick the right channels

        Mail, live chat, telephony, social media, web forms—there are so many support channels out there. Trying to pick the right channels to offer your customers can get pretty confusing. Emails are most useful when the customer wants to put things on record. However, escalated or complicated issues should not be resolved over email because it's slow and impersonal.  When you need immediate responses, live chat is more suitable. It's also quick and convenient, so it's the go-to channel for small issues. 

      • Welcome to Zoho Desk Community - Say hello here!

        Hello everyone! Though we have been here for a while, it’s time to formally establish the Zoho Desk Community; we’re really happy to have you all here! This can be the place where you take a moment to introduce yourself to the rest of the community. We’d love to hear all about you, what you do, what company or industry you work for, how you use Zoho Desk and anything else that you will like to share! Here’s a little about me. I am Chinmayee. I have been associated with Zoho since 2014. I joined here

      • Webinar 1: Blueprint for Customer Service

        With the launch of a host of new features in Zoho Desk, we thought it’ll be great to have a few webinars to help our customers make the most of them. We’re starting off with our most talked about feature, Blueprint in Zoho Desk. You can register for the Blueprint webinar here: The webinar will be delivered by our in-house product experts. This is a good opportunity to ask questions to our experts and understand how Blueprint can help you automate your service processes. We look forward to seeing

        • Recent Topics

        • Send Automated WhatsApp Messages and Leverage the Improved WhatsApp Templates

          Greetings, I hope all of you are doing well. We're excited to announce a major upgrade to Bigin's WhatsApp integration that brings more flexibility, interactivity, and automation to your customer messaging. WhatsApp message automation You can now use

        • Weekly Tips: Manage External Images in Zoho Mail

          When you receive emails every day, whether from clients, newsletters, or services, many of them contain external images that automatically load when you open the message. While this can make emails look more engaging, it can also impact your privacy and

        • Implementing a Self-Invoicing/Vendor Portal in Zoho Creator

          Hello Zoho Community / Creator Experts, We would like to build a Self-Invoicing Portal (Vendor Portal) in Zoho Creator for our external contractors. Our goal is to allow approved contractors to log in, submit their invoice details (hours worked, project

        • Function #32: Schedule low stock notifications on a timely basis to specific users of the organization

          Hello everyone and welcome back to our series! For a business that heavily relies on inventory, monitoring the stock levels and getting timely notifications of low stock items will ensure a smooth sail. Zoho Books allows you to always keep a check on

        • Is it really true that I can't set the default 'deposit to' account in 2025?

          I've been using Books for 7 years and the default account has never been a problem. I usually manually reconcile invoices and have never had a thought about which account. It has always been my account. However, I recently noticed that for the past 4

        • SINCH HUB MESSAGEMEDIA with ZOHO DESK

          1) what I need from MessageMedia, 2) what I want to confirm on the Zoho Desk Dev Forum. MessageMedia – needs and requirements Goal: Send SMS from a Zoho Desk widget for EU users. Auth: HTTP Basic (API Key + Secret). Keys must not live in the browser.

        • Function #46: Auto-Calculate Sales Margin on a Quote

          Welcome back everyone! Last week's function was about displaying the discount amount in words. This week, it's going to be about automatically calculating the sales margin for a particular quote, sales order or an invoice. Business scenario Where there is sales, there's also evaluation and competition between sales reps. A healthy rivalry helps to better motivate your employees to do smart work and close deals faster and more efficiently. But how does a sales rep get evaluated? 90% of the time, it's

        • Invalid URL error when embedded sending url into iframe for my website when using in another region

          Hi team, My site is currently working on integrating your signature feature as part of the system functionality, it's working great but recently there's been a problem like this: After successfully creating the document, i will embed a sending url into

        • 2024 Email Authentication Standards: Elevating Security with Google and Yahoo

          In contemporary email communication, email authentication plays a pivotal role in mitigating email fraud, spam, and phishing attacks. Brace yourself for a new level of security. Starting February 2024, Gmail and Yahoo will be implementing robust email

        • New features released: Data from Picture for Web, Pattern Fill, and Translation in Zoho Sheet!

          Hello Sheet users, In 2024, the Zoho Sheet team focused on research and development to bring new features that add to functionalities like productivity, data management, collaboration, and more. This year, we're all set to roll them out incrementally

        • Kaizen #59 - Creating alerts and custom messages using Client Script

          Hello everyone! We are happy to resume our Zoho CRM Developer Community series - The Kaizen series! Welcome back to the new start of Kaizen! This post is about Client Script and its simple use cases involving ZDK Client functions. What is Client Script?

        • [Webinar] Zoho Writer for content creators and publishing houses

          Managing multiple drafts, edits, and client reviews doesn't have to slow you down. Join our upcoming webinar to see how Zoho Writer helps content creators and publishing houses create, edit, and publish seamlessly—all in one place. You'll learn how to:

        • Universal search

          Hi, it would be useful if the search bar was universal-so if you entered a term, it would bring up results from contacts, candidates, clients etc all at the same time (but broken down under the relevant headings)

        • Attachment reminder?

          My team and I often need to attach files to our messages, e.g. an explanatory screenshot or a shipping label. More often that I want to admit I mention the attachment but forget to actually attach it. Some email clients have a check-for-missing-attachments

        • ZIA in Zoho Cliq

          Is It possible to use the ZIA feature from Zoho Analytics in the Zoho Cliq?

        • Automating CRM backup storage?

          Hi there, We've recently set up automatic backups for our Zoho CRM account. We were hoping that the backup functionality would not require any manual work on our end, but it seems that we are always required to download the backups ourselves, store them,

        • Multiple upload field CRM

          I desperately need the functionality to add more than one upload field to web to contacts form. How can I do this?

        • Critical Need for Global Search in Zoho FSM

          Hello Zoho FSM Team, We are currently in the process of deciding whether to fully transition to Zoho FSM for managing our field service operations. At present, our team actively uses Zoho Desk (with over 50 users) and Service Fusion, which we are considering

        • Collections Management: # 1 Payment Collection is All About Convenience

          "Sir, can you come tomorrow? My manager wasn't available for the cheque sign-off", the customer said, avoiding eye contact. Ravi forced a polite smile, but inside, he felt a sense of defeat. He had already visited the customer's office twice in the last

        • Can the Product Image on the Quote Template be enlarged

          Hello, I am editing the Quote Template and added ${Products.Product Image} to the line item and the image comes up but it is very tiny. Is there anyway that you can resize this to be larger? Any help would be great! Thanks

        • Audio/video quality issues with Zoho Meeting – Any roadmap for improvement?

          Hi Zoho Team, We’ve been using Zoho Meeting for both internal and external meetings, and unfortunately, the experience has been consistently poor. The video and audio quality are so unreliable that it often renders meetings ineffective—especially with

        • Cash based businesses cannot use the new fixed asset module

          Hello all, If your bookkeeping is reporting in cash, you cannot use the new fixed acid module, as it does all the depreciation bookings accrual and not cash. This is definitive and you can't turn them into a cash booking. They will never appear in your

        • Zoho Learn & Zoho Connect

          Hi, Is there a way to sync the knowledge base we have in Zoho Learn with the manuals section is Zoho Connect? Thanks,

        • Apply Payment Received Amount Zoho Books Invoice

          Hello team here is the sample code How can apply the payment received record over a unpaid zoho books invoice. //......................... paymentID = customer_payment.get("payment_id"); organizationID = organization.get("organization_id"); paymentmaplist

        • [Live Webinar] New in Zoho WorkDrive: AI enhancements, Data Loss Prevention, Version Controls, and more

          Hello everyone, We're excited to bring you another round of powerful updates in Zoho WorkDrive! Join us on May 15 for an exclusive live webinar where we’ll unveil the latest features designed to enhance your team’s productivity, collaboration, and data

        • Live webinar: Streamlining legal operations: Leveraging Zoho WorkDrive for law firm success

          Hello everyone, Managing legal documents across departments and jurisdictions can be complex, but it doesn’t have to be. Join us on March 6 for an exclusive webinar where we’ll show you how Zoho WorkDrive empowers legal teams to stay compliant, organized,

        • Live Webinar: Optimizing back-office operations in the manufacturing industry to maximize profitability

          Hello everyone, We’re excited to invite you to our upcoming live webinar on February 6! Discover how Zoho WorkDrive can help manufacturing businesses optimize back-office operations, improve efficiency, and boost profitability. Our product experts will

        • Live webinar: 2024 recap of Zoho WorkDrive

          Hello everyone, We’re excited to invite you to our year-end live webinar! This session will take you through the transformative features and updates we’ve introduced in Zoho WorkDrive this year, helping you streamline document management like never before.

        • Live webinar: Explore WorkDrive's seamless integrations with key Zoho apps

          Hello everyone, We’re excited to invite you to our upcoming live webinar, where we'll delve into the seamless integration of WorkDrive with other key Zoho applications! This is a fantastic opportunity to enhance your productivity and streamline your workflows

        • Live webinar: Getting the most out of WorkDrive in Zoho Workplace

          Hello everyone, We’re excited to invite you to our upcoming live webinar, where we’ll explore how to maximize your use of WorkDrive as part of the Zoho Workplace bundle. This is a fantastic opportunity to elevate your productivity and streamline your

        • Live webinar: Mastering data migration, organization, and team collaboration

          Hello everyone, We’re excited to invite you to our upcoming live webinar! Discover how to seamlessly migrate your data, optimize file organization, and boost team collaboration using Zoho WorkDrive’s powerful features. This is a fantastic opportunity

        • Join our live webinar: Explore the WorkDrive TrueSync application!

          Hello everyone, We are thrilled to invite you to a live webinar focused on mastering the WorkDrive TrueSync application. Discover how to seamlessly sync your content between the cloud and your computer, ensuring smooth and efficient file management. Our

        • Zoho Creator customer portal limitation | Zoho One

          I'm asking you all for any feedback as to the logic or reasoning behind drastically limiting portal users when Zoho already meters based on number of records. I'm a single-seat, Zoho One Enterprise license holder. If my portal users are going to add records, wouldn't that increase revenue for Zoho as that is how Creator is monetized? Why limit my customer portal to only THREE external users when more users would equate to more records being entered into the database?!? (See help ticket reply below.)

        • Script Editor not an option

          I am trying to apply a script to a sheet and Script Editor is not an option. I don't want to go outside Sheets to do this (like Creator) if it can be done inside Sheets.

        • Envio de mails

          Hola! No puedo enviar mails pero si recibirlos. No se como solucionarlo! Mi dominio es chidobebes.com.ar

        • ERROR CODE :554 - Your access to this mail system has been rejected due to poor reputation of a domain used in message transfer

          In my email configuration: The domain's MX Records are pointed to Zoho The domain's SPF Records have been pointed out successfully DKIM is enabled. DMARC Record is pointed for the domain. The domain name is digioorja.in. Still facing the issue of Error:

        • This Operation has been restricted. Please contact support-as@zohocorp.com for further details

          l tried to verify my domain (casalimpaeperfumada.com.br) and its shows this error: This Operation has been restricted. Please contact support-as@zohocorp.com for further details.

        • SLOW EMAILS

          Is there an issue with the Zoho server? For two days now I've been having issues with very long buffering. Please advise. Thank you.

        • POP3 authentication error - SOLVED

          Just in case others are as forgetful as me ... As Zoho has changed the POP server for personal and free organisational users, I needed to change the POP server on my email client. This failed persistently but eventually I remembered that I had chosen

        • Solution to Import PST File into Office 365.

          MailsDaddy OST to Office 365 Migration Tool is an outstanding solution to recover OST files and migrate them into Office 365 without any hassle. Using this software users can multiple OST files into Office 365 with complete data security. It offers users

        • Next Page