DNS

Zoho Mail DNS record generator

Get the three MX records and the SPF include Zoho Mail needs, ready to paste into any DNS panel.

Free, no accountIn your browser

The records below do not change with this, but the page below will name your own domain rather than a generic one.

Try

Result

MX and SPF ready for your domain

Add these as MX and TXT records at the root of your domain, then add DKIM from Zoho's own console.

  • Info

    The three records below do not need your domain

    Every value Zoho publishes for MX and SPF is the same for every account, so there is nothing to fill in to get them right. Typing your domain only makes this page name it instead of speaking generically.

  • Info

    DKIM is generated per account, not published here

    Zoho creates a different DKIM selector and key for every Zoho Mail account, so there is no fixed value this generator could print - a realistic-looking placeholder here would be wrong for every domain that pasted it.

    Open the Zoho Mail admin console, go to Email Authentication, and copy the DKIM TXT record it shows there for this domain.

  • Passed

    Three MX records, ready to paste exactly as shown

    Zoho Mail's three mail servers fan out by priority: the lowest number is tried first, and the other two are only reached if it is unavailable.

  • Passed

    One SPF record, enforced with a hard fail

    Zoho's own SPF page recommends -all once Zoho is the only sender for this domain. Swap it for the softer ~all if another provider also sends mail here before every sender is listed, or use include:one.zoho.com instead of include:zohomail.com if this account also uses other Zoho services beyond Mail.

MX records to publish

10 mx.zoho.com 20 mx2.zoho.com 50 mx3.zoho.com

At @ (MX)

Priority then host. All three go at the root of the domain, not a subdomain.

SPF record to publish

v=spf1 include:zohomail.com -all

At @ (TXT)

Publish this at the domain itself. Zoho offers ~all as a softer alternative to -all, and include:one.zoho.com in place of include:zohomail.com for an account that uses other Zoho services too - a domain may only have one SPF record, so add senders to this one rather than publishing a second.

DNS records for your domain

HostTypeValuePriority
@MXmx.zoho.com10
@MXmx2.zoho.com20
@MXmx3.zoho.com50
@TXTv=spf1 include:zohomail.com -all-

DKIM is missing on purpose - it is generated per Zoho Mail account and only ever shown inside Zoho's own admin console.

  • DKIM is tenant-specific and only appears inside the Zoho Mail admin console; this tool cannot generate it and does not guess at a value.

What this is

This Zoho Mail DNS records generator writes the three MX records and the SPF include every Zoho Mail account needs, because none of them changes from one Zoho account to the next - only DKIM does, and that one stays inside Zoho's own console.

Zoho Mail answers on three mail servers rather than one, so its MX setup is three records instead of the single one most other mailbox providers publish: mx.zoho.com first, mx2.zoho.com and mx3.zoho.com behind it as the priority numbers rise.

The SPF side is a single include that names Zoho as an authorised sender for the domain. It is the same line for every Zoho Mail account, which is why it can be printed here with nothing to fill in.

For what an MX record's priority number actually does, and how SPF fits alongside it, see our blog guide "The DNS records a domain needs, and what each one actually does."

How to read the result

The three MX records and the one SPF record below are correct for any domain the moment they are published - nothing on this page changes what they say, because Zoho does not vary them by account.

DKIM is the one piece this page cannot hand you: Zoho mints a distinct selector and key for every account, so the only place that value exists is inside the Zoho Mail admin console itself, under Email Authentication.

Common mistakes

What goes wrong most often, and how to tell.

  • Only publishing mx.zoho.com and skipping the other twoThe second and third MX records are not optional backups to add later - they are part of how Zoho Mail routes around a busy or unreachable primary server, so a domain missing them loses that fallback from day one.
  • Pasting a placeholder DKIM value instead of leaving it for the consoleNo DKIM value prints on this page because there is no single correct one - it is generated per account inside Zoho's own admin console, and a value copied from somewhere else will not match the key Zoho actually signs with.
  • Publishing a second SPF record for Zoho alongside an existing oneA domain is only allowed one SPF TXT record. Zoho's include needs to be added as one more term inside the existing record, not published as a second one that breaks SPF checking for every sender.

Questions

What people ask about this tool.

  • Zoho Mail answers on three separate mail servers rather than a single one, and the three priorities tell a sending server which to try first: mx.zoho.com at priority 10, then mx2.zoho.com, then mx3.zoho.com if both of the others are unreachable.
  • Zoho generates a different DKIM selector and key for every account, so there is no fixed value a generator can print. Open the Zoho Mail admin console, go to Email Authentication, and copy the DKIM TXT record shown there for this specific domain.
  • Yes - SPF and DKIM only tell a receiver whether a message authenticates; DMARC is what tells it what to do with one that fails. The DMARC generator next door builds that record once the three above are live.
  • No - the MX hostnames above are for the global zoho.com service. A Zoho Mail account on the EU region publishes different mail servers and a different SPF include, which Zoho states on its own region-specific setup pages.

Sources

Every fixed value here comes from the provider’s own documentation. These pages change, so each says the day it was last read.

Use it from the API

The same check, as one request.

Request
curl -X POST https://resellerhq.com/api/tools/zoho-mail-dns-generator \
  -H "Content-Type: application/json" \
  -d '{"domain":""}'
Response
{
  "tool": "zoho-mail-dns-generator",
  "input": {
    "domain": ""
  },
  "result": {
    "verdict": {
      "tone": "success",
      "headline": "MX and SPF ready for your domain",
      "summary": "Add these as MX and TXT records at the root of your domain, then add DKIM from Zoho's own console."
    },
    "findings": [
      {
        "id": "personalize-with-domain",
        "severity": "info",
        "title": "The three records below do not need your domain",
        "detail": "Every value Zoho publishes for MX and SPF is the same for every account, so there is nothing to fill in to get them right. Typing your domain only makes this page name it instead of speaking generically."
      },
      {
        "id": "dkim-in-admin-console",
        "severity": "info",
        "title": "DKIM is generated per account, not published here",
        "detail": "Zoho creates a different DKIM selector and key for every Zoho Mail account, so there is no fixed value this generator could print - a realistic-looking placeholder here would be wrong for every domain that pasted it.",
        "fix": "Open the Zoho Mail admin console, go to Email Authentication, and copy the DKIM TXT record it shows there for this domain."
      },
      {
        "id": "mx-records-ready",
        "severity": "pass",
        "title": "Three MX records, ready to paste exactly as shown",
        "detail": "Zoho Mail's three mail servers fan out by priority: the lowest number is tried first, and the other two are only reached if it is unavailable."
      },
      {
        "id": "spf-record-ready",
        "severity": "pass",
        "title": "One SPF record, enforced with a hard fail",
        "detail": "Zoho's own SPF page recommends -all once Zoho is the only sender for this domain. Swap it for the softer ~all if another provider also sends mail here before every sender is listed, or use include:one.zoho.com instead of include:zohomail.com if this account also uses other Zoho services beyond Mail."
      }
    ],
    "parts": [
      {
        "kind": "record",
        "title": "MX records to publish",
        "value": "10 mx.zoho.com\n20 mx2.zoho.com\n50 mx3.zoho.com",
        "note": "Priority then host. All three go at the root of the domain, not a subdomain.",
        "at": {
          "name": "@",
          "type": "MX"
        }
      },
      {
        "kind": "record",
        "title": "SPF record to publish",
        "value": "v=spf1 include:zohomail.com -all",
        "note": "Publish this at the domain itself. Zoho offers ~all as a softer alternative to -all, and include:one.zoho.com in place of include:zohomail.com for an account that uses other Zoho services too - a domain may only have one SPF record, so add senders to this one rather than publishing a second.",
        "at": {
          "name": "@",
          "type": "TXT"
        }
      },
      {
        "kind": "table",
        "title": "DNS records for your domain",
        "columns": [
          "Host",
          "Type",
          "Value",
          "Priority"
        ],
        "mono": [
          2
        ],
        "rows": [
          [
            "@",
            "MX",
            "mx.zoho.com",
            "10"
          ],
          [
            "@",
            "MX",
            "mx2.zoho.com",
            "20"
          ],
          [
            "@",
            "MX",
            "mx3.zoho.com",
            "50"
          ],
          [
            "@",
            "TXT",
            "v=spf1 include:zohomail.com -all",
            "-"
          ]
        ],
        "note": "DKIM is missing on purpose - it is generated per Zoho Mail account and only ever shown inside Zoho's own admin console."
      }
    ],
    "limits": [
      "DKIM is tenant-specific and only appears inside the Zoho Mail admin console; this tool cannot generate it and does not guess at a value."
    ]
  }
}

Resell the domains these records point at, at your own price, under your own brand.

Get started

Company names and logos are trademarks of their owners, shown only to identify each service.