DNS
Zoho Mail DNS record generator
Get the three MX records and the SPF include Zoho Mail needs, ready to paste into any DNS panel.
Free, no accountIn your browser
The records below do not change with this, but the page below will name your own domain rather than a generic one.
Result
MX and SPF ready for your domain
Add these as MX and TXT records at the root of your domain, then add DKIM from Zoho's own console.
- Info
The three records below do not need your domain
Every value Zoho publishes for MX and SPF is the same for every account, so there is nothing to fill in to get them right. Typing your domain only makes this page name it instead of speaking generically.
- Info
DKIM is generated per account, not published here
Zoho creates a different DKIM selector and key for every Zoho Mail account, so there is no fixed value this generator could print - a realistic-looking placeholder here would be wrong for every domain that pasted it.
Open the Zoho Mail admin console, go to Email Authentication, and copy the DKIM TXT record it shows there for this domain.
- Passed
Three MX records, ready to paste exactly as shown
Zoho Mail's three mail servers fan out by priority: the lowest number is tried first, and the other two are only reached if it is unavailable.
- Passed
One SPF record, enforced with a hard fail
Zoho's own SPF page recommends -all once Zoho is the only sender for this domain. Swap it for the softer ~all if another provider also sends mail here before every sender is listed, or use include:one.zoho.com instead of include:zohomail.com if this account also uses other Zoho services beyond Mail.
MX records to publish
At @ (MX)
Priority then host. All three go at the root of the domain, not a subdomain.
SPF record to publish
At @ (TXT)
Publish this at the domain itself. Zoho offers ~all as a softer alternative to -all, and include:one.zoho.com in place of include:zohomail.com for an account that uses other Zoho services too - a domain may only have one SPF record, so add senders to this one rather than publishing a second.
DNS records for your domain
| Host | Type | Value | Priority |
|---|---|---|---|
| @ | MX | mx.zoho.com | 10 |
| @ | MX | mx2.zoho.com | 20 |
| @ | MX | mx3.zoho.com | 50 |
| @ | TXT | v=spf1 include:zohomail.com -all | - |
DKIM is missing on purpose - it is generated per Zoho Mail account and only ever shown inside Zoho's own admin console.
- DKIM is tenant-specific and only appears inside the Zoho Mail admin console; this tool cannot generate it and does not guess at a value.
What this is
This Zoho Mail DNS records generator writes the three MX records and the SPF include every Zoho Mail account needs, because none of them changes from one Zoho account to the next - only DKIM does, and that one stays inside Zoho's own console.
Zoho Mail answers on three mail servers rather than one, so its MX setup is three records instead of the single one most other mailbox providers publish: mx.zoho.com first, mx2.zoho.com and mx3.zoho.com behind it as the priority numbers rise.
The SPF side is a single include that names Zoho as an authorised sender for the domain. It is the same line for every Zoho Mail account, which is why it can be printed here with nothing to fill in.
For what an MX record's priority number actually does, and how SPF fits alongside it, see our blog guide "The DNS records a domain needs, and what each one actually does."
How to read the result
The three MX records and the one SPF record below are correct for any domain the moment they are published - nothing on this page changes what they say, because Zoho does not vary them by account.
DKIM is the one piece this page cannot hand you: Zoho mints a distinct selector and key for every account, so the only place that value exists is inside the Zoho Mail admin console itself, under Email Authentication.
Common mistakes
What goes wrong most often, and how to tell.
- Only publishing mx.zoho.com and skipping the other twoThe second and third MX records are not optional backups to add later - they are part of how Zoho Mail routes around a busy or unreachable primary server, so a domain missing them loses that fallback from day one.
- Pasting a placeholder DKIM value instead of leaving it for the consoleNo DKIM value prints on this page because there is no single correct one - it is generated per account inside Zoho's own admin console, and a value copied from somewhere else will not match the key Zoho actually signs with.
- Publishing a second SPF record for Zoho alongside an existing oneA domain is only allowed one SPF TXT record. Zoho's include needs to be added as one more term inside the existing record, not published as a second one that breaks SPF checking for every sender.
Questions
What people ask about this tool.
- Zoho Mail answers on three separate mail servers rather than a single one, and the three priorities tell a sending server which to try first: mx.zoho.com at priority 10, then mx2.zoho.com, then mx3.zoho.com if both of the others are unreachable.
- Zoho generates a different DKIM selector and key for every account, so there is no fixed value a generator can print. Open the Zoho Mail admin console, go to Email Authentication, and copy the DKIM TXT record shown there for this specific domain.
- Yes - SPF and DKIM only tell a receiver whether a message authenticates; DMARC is what tells it what to do with one that fails. The DMARC generator next door builds that record once the three above are live.
- No - the MX hostnames above are for the global zoho.com service. A Zoho Mail account on the EU region publishes different mail servers and a different SPF include, which Zoho states on its own region-specific setup pages.
Sources
Every fixed value here comes from the provider’s own documentation. These pages change, so each says the day it was last read.
- Zoho, “Configure Email Delivery | Zoho Mail” read 12 October 2026
- Zoho, “SPF- Sender Policy Framework | Zoho Mail” read 12 October 2026
Use it from the API
The same check, as one request.