VerifySeal ManagerLive verification platform
← All installation guides Email authentication and DNS

Set up Zoho Mail DKIM for an Email Sender Seal

Create and enable a Zoho Mail selector, publish its public key and prepare the sender seal.

ZO✉
Recommended methodEmail DNS and seal setup
Email authentication setup

Configure email DNS and find the selector

  1. 1

    Open the domain DKIM page

    Sign in to Zoho Mail Admin Console, open Domains, select the sender domain, choose Email Configuration and then DKIM.

  2. 2

    Create a selector

    Choose Add, enter a selector name such as zoho and select the supported key length. Record the selector exactly as entered.

  3. 3

    Publish the public key

    Copy the TXT record name and value from Zoho into the authoritative DNS provider. Do not add quotation marks unless the DNS interface does so automatically.

  4. 4

    Verify and enable

    Return to Zoho, verify the selector, make it the required default and enable it for the domain. Send a message externally and confirm the s= selector and DKIM pass result.

  5. 5

    Complete VerifySeal

    Enter the active Zoho selector, run the SPF, DKIM and DMARC check, then use the appropriate email-signature guide to install the seal.

Open Zoho Mail DKIM documentation ↗
Email Sender Verification Seal

Complete authentication before installing the seal

The sender domain must continue to publish a valid SPF record, the selected DKIM key and a DMARC policy. VerifySeal automatically rechecks these records according to the administrator schedule. For High Security messages, DKIM must cover the final Message-ID, VEM header and completed body.

  • SPF authorizes sending services
  • DKIM verifies the signed message domain
  • DMARC publishes the domain policy
Testing checklist

Confirm the installation is working

01

SPF

The sender domain has one valid SPF record containing every authorized sending service.

02

DKIM

A new external message reports DKIM pass and its matching signature contains the selector entered in VerifySeal.

03

DMARC

A DMARC record is published at _dmarc and its policy matches the organization’s approved rollout.

04

VerifySeal

The customer order reports SPF, DKIM and DMARC as verified before the Email Sender Seal is issued.

Platform notes
  • Zoho can use multiple selectors for different users. Verify the selector that signs the actual sender address used for the seal.
All seal types

View every available VerifySeal design

Domain OwnershipEmail Sender VerificationHigh Security Email VerificationVerified BusinessVerified OrganizationVerified ResellerTrusted WebsiteCertified MemberAustralian Builder LicenceAustralian Financial Services LicenceWebsite PCI DSS ComplianceDocument IntegrityVerified Issuer DocumentHigh Security Document Authentication