How do I set up DKIM at Squarespace for Zoho Mail?
Add a DKIM selector in the Zoho Mail Admin Console, publish its key in Squarespace as a TXT record named zoho._domainkey, then verify and enable it.
Last read from the sources at the foot of this page.
- Type
- TXT
- Name
zoho._domainkey- Value
The TXT record value Zoho shows for your selector
What does DKIM do?
It adds a signature to each message your domain sends. A mail server checks the signature against a key published in your DNS, so a message changed or forged on the way fails.
Where does Zoho Mail make the key?
In the Zoho Mail Admin Console, go to Domains and choose your domain. In the Email Configuration tab, select DKIM, then Add. Name the selector zoho, choose a key length of 1024 or 2048 bits, and select Add. Zoho shows the TXT record value for the selector. Copy it. Do not select Verify yet.
zoho._domainkeyHow do I add it at Squarespace?
- Sign in to Squarespace, open your domains dashboard and click your domain.
- Click DNS, then DNS Settings, and scroll down to Custom Records.
- Click Add record, confirm your password if asked, and choose TXT in the Type menu.
- Type zoho._domainkey in Name.Leave your domain name out: it is added for you.
- Paste the whole value Zoho shows in Text, exactly as copied.
- Click Save.
In our words, from Squarespace: adding a TXT record, read 14 October 2026. If a screen has changed since, follow the host's own page.
How do I turn signing on?
Go back to DKIM in the Email Configuration tab and select Verify beside your selector. Once it is verified, Zoho offers to enable DKIM now or later: enable it. If the check fails, wait for your DNS change to be seen and try again.
Where does this come from?
- Zoho Mail: DKIM configurationzoho.comRead 14 October 2026
- Squarespace: adding a TXT recordsupport.squarespace.comRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/