Set up Zoho Mail DNS on Azure DNS
This guide shows how to configure DNS records for Zoho Mail on Azure DNS, including SPF, DKIM, DMARC, MX, and domain verification records. The fastest way to do this is with the mail2dns CLI, which automatically creates all required records for your domain in seconds.
Setup
If needed, install mail2dns before following the below steps:
npm i -g mail2dnsNote: The Azure CLI must be installed, configured and authenticated. mail2dns will use the active subscription, or you can specify a subscription by supplying the ID or name to the ‑‑subscription option or
AZURE_SUBSCRIPTION_ID environment variable
The account used must have the following permissions:
Microsoft.Network/dnszones/readMicrosoft.Network/dnszones/*/readMicrosoft.Network/dnszones/TXT/writeMicrosoft.Network/dnszones/MX/writeMicrosoft.Network/dnszones/CNAME/write
Run the following command and answer the prompts to create DNS records at Azure DNS:
mail2dns setup [YOUR_DOMAIN] zoho azureYou will be prompted to input the following values:
-
Zoho Mail domain verification TXT value
In the Zoho Mail Admin Console, go to Domains > [your domain] > Domain Verification and copy the full TXT record value shown.
-
Zoho Mail DKIM TXT value
In the Zoho Mail Admin Console, go to Domains > [your domain] > Email Authentication (DKIM) and copy the TXT record value shown.
Set the following environment variables:
ZOHO_VERIFY_TXT=
ZOHO_DKIM_KEY=Then run the following command to create DNS records at Azure DNS:
mails2dns setup [YOUR_DOMAIN] zoho azureEnvironment Variables Reference
-
ZOHO_VERIFY_TXT
Zoho Mail domain verification TXT value. In the Zoho Mail Admin Console, go to Domains > [your domain] > Domain Verification and copy the full TXT record value shown.
-
ZOHO_DKIM_KEY
Zoho Mail DKIM TXT value. In the Zoho Mail Admin Console, go to Domains > [your domain] > Email Authentication (DKIM) and copy the TXT record value shown.
Run the following command, supplying the required options, to create DNS records at Azure DNS:
mails2dns setup [YOUR_DOMAIN] zoho azure --verify-txt [ZOHO_VERIFY_TXT] --dkim-key [ZOHO_DKIM_KEY] Options Reference
-
--verify-txt
Zoho Mail domain verification TXT value. In the Zoho Mail Admin Console, go to Domains > [your domain] > Domain Verification and copy the full TXT record value shown.
-
--dkim-key
Zoho Mail DKIM TXT value. In the Zoho Mail Admin Console, go to Domains > [your domain] > Email Authentication (DKIM) and copy the TXT record value shown.
That's it! After running the setup command, the required DNS records will be created for your domain at Azure DNS to work with Zoho Mail.
Optional Flags
--subscription Azure subscription ID to use -o --no-mx Skip MX records (set up DNS for outbound email only) -y --yes Skip confirmation prompts (the command will error if any required inputs are missing) --allow-insecure-flags Allow secrets to be passed via command-line flags (not recommended) -d --dry-run Show records that would be created without applying them DNS records required for Zoho Mail
Zoho Mail requires the following DNS records to send and receive email from your domain. These are created automatically by the mail2dns setup command:
TXT Record
@ → {VERIFY_TXT}
MX Record
@ → mx.zoho.com
MX Record
@ → mx2.zoho.com
MX Record
@ → mx3.zoho.com
TXT Record
@ → v=spf1 include:zoho.com ~all
TXT Record
_dmarc → v=DMARC1; p=none;
TXT Record
zoho._domainkey → {DKIM_KEY}
Protecting Secrets
When running the mail2dns setup command, if you provide credentials via flags these will be visible in your shell history and process list.
To avoid this, you can provide credentials via environment variables or interactively. If you understand the risks and still want to provide credentials via flags, you should take steps to ensure that the input is not saved in shell history, and avoid running it on a shared or public machine.
By default, the setup command will error if you provide secrets via flags: to enable them you must opt in by passing the --allow-insecure-flags option, or setting M2D_ALLOW_INSECURE_FLAGS=true environment variable.
Non-interactive mode
You may wish to run the mail2dns setup command without any confirmation prompts (by default, mail2dns asks you to confirm the DNS records it creates before applying them). To do this, use the ‑‑yes or ‑y flag with the setup command. Be sure to review the DNS records that will be created before running the command with this flag, as it will apply all changes without confirmation.
Any mix of flags and environment variables may be used to provide the required values. By default any missing values will be prompted for, or in non-interactive mode the command will produce an error if there are missing required values.
Related Setups
For Zoho Mail
- Set up Zoho Mail DNS on Cloudflare +
- Set up Zoho Mail DNS on Amazon Route 53 +
- Set up Zoho Mail DNS on Google Cloud +
- Set up Zoho Mail DNS on Vercel +
- Set up Zoho Mail DNS on DigitalOcean +
- Set up Zoho Mail DNS on GoDaddy +
- Set up Zoho Mail DNS on Netlify +
- Set up Zoho Mail DNS on Hetzner +
For Azure DNS
- Set up Google Workspace DNS on Azure DNS +
- Set up Microsoft 365 DNS on Azure DNS +
- Set up Amazon SES DNS on Azure DNS
+ - Set up Twilio SendGrid DNS on Azure DNS
+ - Set up Mailgun DNS on Azure DNS
+ - Set up Resend DNS on Azure DNS
+ - Set up Postmark DNS on Azure DNS
+ - Set up Proton Mail DNS on Azure DNS
+