How do I set up Zoho Campaigns so its email passes DMARC?

What does Zoho Campaigns ask me to publish?

If the SPF record already exists in your domain's DNS settings, please add include:zcsend.net to the record and click Publish.

Zoho Campaigns makes the values for your account, so we do not print any here.

Where in Zoho Campaigns are my values shown?

Select Domain Authentication under Deliverability. Click Setup on the extreme right of the row. In the Setup page, click Copy button next to the text records.

In Zoho Campaigns, choose Settings, then Domain Authentication under Deliverability, then Setup, and copy the text records.

Copy each value from there exactly as shown, and add each record at your DNS host.

How do I add Zoho Campaigns to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add the include Zoho Campaigns shows you inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

Will p=reject block Zoho Campaigns email?

A message satisfies the DMARC checks if at least one of the supported authentication mechanisms: 1. produces a "pass" result, and 2. produces that result based on an identifier that is in alignment

Not once Zoho Campaigns signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Zoho Campaigns gives you are on your domain.

Before you raise your policy, read your DMARC reports and check that email from Zoho Campaigns passes.