In this digital era email forms a major part of communication in every business or organization. Companies often use different servers or domains other than their server to deliver the message to its recipients. In such cases it's crucial to establish an email policy that can define the rules by which the email can be authenticated from its domain name.

Zoho Recruit provides email authentication standards that will allow the organizations to increase the trustworthiness of its email origin when it chooses to send emails from Zoho Recruit using their domain. To authenticate your emails sent from Zoho Recruit, you need to validate the following authentication standards:

• Domain Verification
• DKIM (DomainKeys Identified Mail)
• SPF (Sender Policy Framework)

Note: This applies to all portal login (candidate, client, and vendor) related emails too.

Email Authentication

Authenticating the email source consists of the following steps:

Step 1. Add your company's domain or subdomain

Adding your company's domains or subdomains is the first step for email authentication. Domain verification helps to ensure that the domain from which the emails are sent is authentic and trustworthy. To facilitate this, you have to add your company's email address and the domains or subdomains in Zoho Recruit.

Step 2. Verify the domain details

Once you add the domain, a verification code is generated and sent to the email address that should be entered to verify the domain details. The verification email is valid for 15 days, in case you do not receive an email or you have exhausted the validity period, you can use the Resend Mail link.

Step 3. Validate the records

Once the domain and subdomains details are verified, you can select either of the two email authentication standards to validate the email source:

DKIM - DKIM is used to ensure that the message has not been altered in transmission. It uses public key encryption to authenticate the email messages.See Also DKIM Configuration

SPF - This authentication standard allows sending domains to define which IP addresses are allowed to deliver email messages on behalf of the domain. See Also SPF Configuration

Note:

Another authentication standard that the sending domains use to block fraudulent emails is DMARC (Domain-Based Message Authentication, Reporting, and Conformance). It is built as a combination of the DKIM and SPF standards with additional features like reporting, policy definition, and the notion of identity alignment. A domain needs to pass both SPF and DKIM to satisfy the DMARC regulation. 

Add Your Company's Domain

Go to Setup > General > Email Settings > Email Authentication.

In the Email Authentication page, click Add Domain.

In the Add Domain popup, enter the email address.

Click Add Domain.
​

Verify the Domain Details

To verify the domain and subdomain details:

1. Go to the Domain and click Enter Code.
2. In the Verify Domain popup, enter the verification code.
3. Click Verify.
   
   

Validate the Records

1. Go to the Domain and click Validate Records.
2. In the Authenticate Domain popup, copy the SPF or DKIM record code.
3. Paste the code in your DNS settings.
4. Click Validate Record, once the code is added.