InboxAudit

Zoho Mail (EU) email authentication

Zoho Mail accounts provisioned in the European data centre use a separate include.

SPF record

Add Zoho Mail (EU) to your domain's SPF record with this include:

include:zoho.eu

A complete record for a domain sending only through Zoho Mail (EU):

v=spf1 include:zoho.eu ~all

What it costs you

2 of your 10 DNS lookups. The include: itself costs one, and Zoho Mail (EU)'s record chains to 1 more. Behind it are 10 IP ranges.

Live record

This is what zoho.eu published when this page was generated:

v=spf1 include:spf.zoho.eu -all

DKIM

Enable DKIM inside Zoho Mail (EU) and publish the selector record it generates. DKIM matters more than SPF for deliverability, because a DKIM signature survives forwarding while SPF does not — see how selectors work.

DMARC

Neither SPF nor DKIM protects the address your recipients actually see until DMARC ties them to it. Once Zoho Mail (EU) is authenticating, publish a DMARC record — start at p=none with a reporting address and tighten from there.

Generate a DMARC record →

Check it worked

DNS changes take minutes to hours to propagate. Once published, run the domain through the checker — it resolves the full include chain and reports the real lookup count.

Official documentation

Zoho Mail (EU) setup docs →