How to Authenticate Your Domain

Step 1 – Open Email Deliverability Settings

1. Log in to your Zoho CRM account.
2. Click the Settings (⚙️) icon.
3. Under Channels, select Email.
4. Click Email Deliverability.

Step 2 – Add Your Domain

If your domain has not yet been added:

1. Click Add Domain.
2. Enter your email address.
3. Click Add Domain.
4. Zoho will send a verification email to that address.
5. Open the email, copy the verification code, and enter it in Zoho.
6. Click Verify.

Your domain will now appear under Incomplete & Pending Authentication until the DNS records are configured.

Step 3 – Retrieve Your DNS Records

1. Select your pending domain.
2. Click Validate Records.
   
   

Zoho will display the DNS records that need to be added to your domain.

Step 4 – Access Your DNS Provider

Log in to your domain registrar or hosting provider (such as GoDaddy, Cloudflare, Squarespace, Namecheap, etc.) and open the DNS Management page for your domain.

Step 5 – Add the DKIM Record

Create a new TXT record.

Use the values provided by Zoho:

• Type: TXT
• Host / Name: Copy the DKIM selector shown in Zoho (do not include the trailing period if one is displayed).
• Value: Copy the DKIM value exactly as provided by Zoho.
• TTL: Leave the default value (30 minutes is recommended if available).
  
  

Step 6 – Update the SPF Record

SPF tells receiving mail servers that Zoho is authorized to send email from your domain.

If your domain does not already have an SPF record, create a new TXT record using the SPF value displayed in Zoho.

Typical settings:

• Type: TXT
• Host / Name: @
• Value: Copy the SPF value provided by Zoho.
• TTL: Default value.
  
  

Important:
If your domain already has an SPF record, do not create a second SPF record. Instead, update the existing SPF record by including the Zoho SPF value. Having multiple SPF records may cause email delivery issues.

Step 7 – Add a DMARC Record (Recommended)

DMARC provides additional protection against email spoofing and helps receiving mail servers decide how to handle messages that fail authentication.

If you don't already have a DMARC record, create a new TXT record with the following values:

• Type: TXT
• Host / Name: _dmarc
• Value: v=DMARC1; p=none;

If you already have a DMARC policy configured, review it carefully before making any changes.

Step 8 – Wait for DNS Propagation

DNS changes are not always immediate.
Most domains update within a few minutes, but propagation may take up to 24-48 hours, depending on your DNS provider.

Step 9 – Validate the Records

After the DNS records have propagated:

1. Return to Settings → Email → Email Deliverability.
2. Click Validate Records.
3. Once all records are detected successfully, your domain will move from Incomplete & Pending Authentication to Authenticated Domains.