Zoho 535 Authentication Failed: SMTP login refused

What it means

Reply 535 is defined by RFC 4954: authentication credentials invalid. When you connect a mail client, printer, or app to Zoho’s SMTP server and log in, a bad login typically reads like “535 Authentication Failed”. No mail is sent until login works.

With Zoho the usual problems are an app password requirement, the wrong regional data center, or the wrong host name. If two-factor authentication is on, Zoho requires an application-specific password for SMTP. Zoho runs separate regions (for example smtp.zoho.com, smtp.zoho.eu, and smtp.zoho.in), and an account only logs in at its own region. Zoho’s SMTP settings page assigns smtp.zoho.com to personal and free organization accounts and smtppro.zoho.com to paid organization accounts with a domain-based address.

This is a client-side setup issue, not a delivery problem with any recipient.

Likely causes

• Using your normal password while two-factor authentication requires an app password.
• Connecting to the wrong regional SMTP server for your account.
• Using smtp.zoho.com instead of smtppro.zoho.com for a paid organization account on your own domain.
• A changed or expired password stored in the app or device.

Checks that apply

• SMTP Diagnostics Connects to the Zoho SMTP host and shows the banner and STARTTLS support, confirming you reach the right server.
• TCP Port Test Tests whether ports 465 or 587 are reachable from your network, ruling out a firewall block.

FAQ

My password works in the browser. Why does SMTP fail?

If two-factor authentication is on, SMTP needs an app password, not your normal one.

Which SMTP server should I use?

The one for your Zoho region: smtppro for paid organization accounts on your own domain, smtp for personal and free accounts. Your Zoho Mail settings show the right host.