# DKIM record for Zoho Campaigns

URL: https://iblockspam.com/dkim/zoho-campaigns
Last updated: 2026-11-03

Record type: TXT
Selectors: numbered per account (e.g. 2232)
Key managed by: Provider (you publish its key)

Zoho Campaigns gives each sender domain a DKIM TXT record on a numbered host, such as `2232._domainkey` in Zoho's example, with a value that begins `k=rsa; p=`. You copy it from the Authenticate Your Domain window, publish it next to the SPF include `zcsend.net`, and click Authenticate. Zoho leaves the DMARC record to you.

## DNS records

- DKIM key for the sender domain (TXT, host 2232._domainkey): `k=rsa; p=<public key shown in Zoho Campaigns>` Zoho's newer guide shows `23441._domainkey`; your number will differ.
- DKIM key when you send from a subdomain such as mail.example.com (TXT, host 2232._domainkey.mail): `k=rsa; p=<public key shown in Zoho Campaigns>`
- SPF on the sender domain (TXT, host @): `v=spf1 include:zcsend.net ~all` Add `include:zcsend.net` to an existing SPF record instead of creating a second one.

## Set it up and turn on signing

- Add and verify a sender address on your own domain. Zoho says public mailbox domains can't be authenticated.
- As an organization admin, go to **Settings > Email > Senders and Authentication** and click **Setup** next to the domain (older accounts: **Settings > Deliverability > Domain Authentication**).
- Copy the DKIM host and value into a new TXT record. If your DNS host appends the domain, enter only the `._domainkey` part Zoho shows.
- Click **Authenticate**. Zoho says DNS changes can take up to 24 hours to update globally; if the status still reads At risk, wait and validate again.
- With SPF and DKIM passing, the Custom Return Path section unlocks: publish its CNAME and click **Validate CRP**. Then publish your own DMARC record.

## DMARC alignment

The numbered key lives under your sender domain, so Zoho Campaigns signs with `d=` your domain and DMARC can pass on DKIM even while bounces still use Zoho's default return path. Zoho says all addresses under an authenticated domain count as authenticated too. Adding the Custom Return Path moves bounces onto a subdomain of yours, which Zoho says aligns your domain across all its checks.

## Key length and rotation

Zoho generates the key and you hold its public half as a TXT value, so a new key needs a DNS update on your side. Neither help article states a key length or rotation schedule. The numbered host makes a change easy to spot: a different number in the setup window means a new record to publish.

## Common mistakes

- **Putting the key on the root domain.** The value goes on the numbered `._domainkey` host, not on `@`.
- **Leaving off the subdomain.** Sending from `mail.example.com` needs the host `2232._domainkey.mail`, with your own number.
- **Expecting Zoho to publish DMARC.** Zoho Campaigns only shows a reminder; the `_dmarc` record is yours to create.
- **A CRP host that already has MX or A records.** Zoho says return path validation then fails.

**Q: What host name does the Zoho Campaigns DKIM record use?**
A number Zoho assigns, followed by `._domainkey`, such as `2232._domainkey` in its example. For a subdomain sender like `mail.example.com`, Zoho adds the subdomain: `2232._domainkey.mail`.

**Q: Does Zoho Campaigns create a DMARC record for me?**
No. Zoho Campaigns shows a heads-up in the DMARC section when none is published, and asks you to create the record yourself. Our [DMARC Record Generator](https://iblockspam.com/tools/dmarc-generator) builds one.

**Q: What do Zoho Campaigns' At risk and Protected statuses mean?**
Zoho checks four parts: SPF, DKIM, DMARC and the custom return path. At risk means none are verified, Needs attention means some are, and Protected means all four are configured and verified.

Sources:
- Zoho Campaigns Help: Senders & Authentication Settings: https://help.zoho.com/portal/en/kb/campaigns-3-0/user-guide/settings/email/articles/v3-senders-authentication
- Zoho Campaigns Help: Authenticate email domain: https://help.zoho.com/portal/en/kb/campaigns/getting-started-guide/articles/how-to-authenticate-email-domain

---

Source: iBlockSpam, https://iblockspam.com/dkim/zoho-campaigns (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt