Skip to content
iBlockSpam
Get started
Check your domain Get started Log in
How it works
Platforms
Microsoft 365 Google Workspace cPanel / WHM Exchange Server
Solutions
Small business MSPs Hosting providers Law firms Accounting firms Healthcare practices Real estate & title
Free tools Pricing
Blog
All guides
By topic
Email security basics Phishing & threats SPF, DKIM & DMARC Setup guides Running email day to day Switching & migration Choosing a filter
Reference
Glossary Research: top 1,000 sites
DKIM by provider

DKIM record for Zoho Mail

Zoho Mail DKIM is a TXT record at <selector>._domainkey.yourdomain.com, where you choose the selector name (Zoho's example is zoho). Zoho generates a 1024-bit or 2048-bit key in the admin console, you publish it, then click Verify and enable signing. A domain can have several selectors, each assigned to different users.

Record type
TXT
Selectors
you choose (e.g. zoho)
Private key held by
Provider (you publish its key)

The DNS records

The selector is whatever you typed in the admin console. Zoho shows the full TXT value to copy; the key below is shortened.

DKIM key for the selector zoho

Type: TXT · Host: zoho._domainkey 

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQ…IDAQAB

Zoho says that at GoDaddy, Wix, Squarespace and Namecheap you enter only <selector>._domainkey as the host; other hosts may want the full zoho._domainkey.yourdomain.com.

A second selector for one group of users

Type: TXT · Host: marketing._domainkey 

v=DKIM1; k=rsa; p=<key Zoho shows for this selector>

Zoho's examples include ukoffice and marketing. Users you don't assign keep using the default selector.

Set it up and turn on signing

  1. In the Zoho Mail admin console, go to Domains in the left menu and choose your domain.
  2. Open the Email Configuration tab, select DKIM, and click Add.
  3. Type a selector name (for example zoho), choose a key length of 1024 or 2048 bits, and save. Zoho shows the TXT value; Send to DNS admin emails the instructions to whoever manages DNS.
  4. Create the TXT record at your DNS host. Zoho says DNS changes can take 12 to 24 hours to take effect.
  5. Back in Zoho, click Verify next to the selector and choose whether to enable DKIM immediately or later. Signing only starts once it's enabled.

DMARC alignment

The record sits under your own domain, and signing starts once the selector is verified and enabled, which gives DMARC a DKIM result for your domain alongside SPF. Zoho says DKIM isn't supported for domains configured with Email Routing and Outbound Gateways, so mail sent that way needs aligned SPF, or a signature added by the gateway, to pass DMARC.

Key length and rotation

Zoho lets you pick 1024 or 2048 bits for each selector; pick 2048 unless your DNS host can't store the longer value (RFC 8301 recommends at least 2048). Zoho's guide doesn't describe automatic rotation. Because one domain can hold several selectors, a new key can be added and verified under a new name before you retire the old one.

Common mistakes

  • Expecting a fixed selector name. Zoho uses the name you typed; check the console before testing with the checker.
  • Verifying before DNS has updated. Allow Zoho's 12 to 24 hours if Verify fails at first.
  • Verifying but never enabling. Choosing "later" at the Verify prompt leaves mail unsigned until you enable it.
  • Using Email Routing or an Outbound Gateway. Zoho doesn't support DKIM signing on those domains.

Check your Zoho Mail DKIM key

Enter your domain and the selector from your Zoho Mail account. Free, reads public DNS only.

Frequently asked questions

Can different Zoho Mail users sign with different DKIM selectors?

Yes. Add more selectors to the domain, publish each one's TXT record, then assign users to a selector from the User List. Everyone you don't assign signs with the default selector.

How long does Zoho Mail take to verify a DKIM record?

Zoho says DNS changes can take 12 to 24 hours to take effect. If Verify fails straight after you publish the record, wait and try again rather than changing the record.

Why can't I use DKIM on my Zoho Mail domain?

Zoho says DKIM isn't supported for domains configured with Email Routing and Outbound Gateways. If your domain uses either, mail leaves through another system, and that system has to sign it or pass aligned SPF.

Sources

Checked against Zoho Mail's documentation on October 9, 2026. Providers change their setup screens; if yours differs, follow the values your admin console shows.

DKIM records for other providers

Compare every provider's selectors in one table · SPF record for Zoho Mail

Related guides

SPF, DKIM & DMARC

How to find a domain's DKIM selector, and check its key

Find a DKIM selector from the s= tag in an email header, see the selectors Microsoft 365, Google Workspace and common senders use, then check the key.

8 min read SPF, DKIM & DMARC

How to rotate DKIM keys without breaking email

How often to rotate DKIM keys, which key length to use, how to name selectors, and how to rotate in Microsoft 365, Google Workspace and on your own server.

9 min read SPF, DKIM & DMARC

DKIM "body hash did not verify" and other DKIM failures: causes and fixes

Fix DKIM failures: body hash did not verify, signature did not verify, no key for signature and short keys. Causes from mailing lists to broken TXT records.

9 min read

Last updated