DKIM Now Mandatory - Changes to Zoho Forms Email Policies
Hello Zoho Forms Users,
This post is to inform you about an important update regarding the authentication of all email domains in your Zoho Forms account. This year, we are doubling down on our commitment to deliver a secure, seamless, and empowering experience for you.
To ensure your form notifications consistently reach their destination, Zoho Forms has updated its email authentication requirements. In alignment with global security standards from major providers like Google and Yahoo, we have implemented strict protections against unauthenticated mail.
Updated Authentication Requirements
To prevent your emails from being blocked:
What has Zoho Forms changed?
To protect your sender reputation and ensure high deliverability, Zoho Forms now restricts the use of public and unverified domains for emails.
Public Domain Restriction: You can no longer save email templates using a public "From" address (e.g., @gmail.com, @outlook.com, @yahoo.com).
Unverified Domain Restriction: Custom business domains must be DKIM verified before they can be used in the "From" address.
Why is this change necessary?
If your emails are unauthenticated, mail servers cannot verify your identity. This results in the following risks:
Issue | Consequence |
Using Public Domains | Emails from @gmail.com or @yahoo.com sent via Zoho Forms are now instantly blocked or flagged as phishing by most receivers. |
Unverified Custom Domain | Without DKIM, your emails lack an authentication, causing them to be sent directly to spam or rejected by most receivers. |
No DMARC (Bulk) | If you send over 5,000 emails a day without DMARC, mail servers will permanently reject your emails to protect their users. |
Required Actions for all Senders
Using public domains (such as Gmail, Yahoo, Outlook)
If you do not have a custom domain and are using a public domain such as gmail as your domain for the From address, you must change your "From" address to the Zoho Forms Default Address for your region:
- Authenticate your custom domain via DKIM
- All email senders are required to ensure authentication of their email-sending domains with DKIM. This is a mandatory step to use your organization's custom domains to send emails.
- DKIM is now enabled in Zoho Forms' Free plan. Users with their own custom domains are required to configure DKIM to prevent their emails from being flagged as spam. Learn about DKIM configuration in Zoho Forms.
Need Assistance?
We are here to help you through this transition. If you have questions or need assistance, please reach out to us at support@zohoforms.com.