Announced on Phase 2 rollout starts Phase 2 rollout ends
June 18, 2026 September 23, 2026 October 22, 2026

Zendesk is raising the security floor for all accounts by establishing a new "minimal security" standard for sender authentication. This update ensures that your account is secure while improving the reliability of legitimate email delivery.

This announcement includes the following topics: 

  • What's changing?
  • Why is Zendesk making this change?
  • What do I need to do?

What's changing?

Zendesk is raising the security floor for all accounts by making Minimal the default sender authentication profile. This update helps protect accounts while improving the reliability of legitimate email delivery.

This update will be implemented in two phases:

  • Phase 1: Accounts can continue to manage sender authentication in Admin Center. Customers can choose an authentication profile or disable sender authentication as needed for their workflow.
    New accounts have sender authentication enabled and set to Minimal by default. Customers can update the authentication profile or disable sender authentication in Admin Center.
  • Phase 2: Zendesk will conduct a staged rollout from Sep 23, 2026 through October 22, 2026 for eligible accounts that currently have sender authentication disabled. Minimal will be selected as the default profile.

Improved email delivery

With Minimal selected as the default profile, spam thresholds are adjusted for traffic that passes authentication, reducing the risk of legitimate forwarded emails being accidentally suspended as spam.

Why is Zendesk making this change?

Zendesk is moving to a secure-by-default model to enhance platform security and address persistent email-suspension issues. Minimal is the default profile, while customers retain the ability to disable sender authentication when needed for their workflow.

What do I need to do?

For accounts with sender authentication already enabled: No action is required. You can continue to select an authentication profile or disable sender authentication in the Admin Center as needed.

For accounts that currently have sender authentication disabled: No action is required for the staged migration. Minimal will be selected as the default profile. You can disable sender authentication in the Admin Center if needed for your workflow.

For additional guidance:

  • Review documentation. To understand how these protocols work, see Authenticating incoming email (SPF, DKIM, DMARC, and ARC).
  • Monitor your Suspended tickets view regularly. Spam issues must be resolved at the source; adjusting filters will not improve sender reputation or prevent messages from being suspended.
    As needed, work with your domain admin or provider to examine and correct any issues with forwarding workflows.

If you have feedback or questions related to this announcement, visit our community forum, where we collect and manage customer product feedback. For general assistance with your Zendesk products, contact Zendesk Customer Support.

Powered by Zendesk