Email deliverability is the share of your emails that reach the recipient’s inbox instead of the spam folder or being rejected. In 2026, good deliverability depends on three things: authenticating your domain with SPF, DKIM and DMARC; keeping your spam complaint rate below 0.3% (ideally under 0.1%) as Gmail and Yahoo require; and sending relevant email to people who asked for it, with a one-click unsubscribe. Senders of more than 5,000 messages a day to Gmail must meet stricter bulk-sender rules, and Gmail has been ramping up rejections of non-compliant mail since November 2025.
This guide explains how email deliverability works, the current mailbox provider requirements, and the steps to improve inbox placement.
Updated October 2026.
Go to:
What is email deliverability?
Email deliverability measures whether your messages land in the inbox. It is different from delivery rate, which only counts messages that were accepted by the receiving server. A message can be “delivered” and still go straight to spam.
Mailbox providers such as Gmail, Yahoo Mail, Outlook.com and Apple iCloud Mail decide where each message goes. They look at who sent it, whether the sender is authenticated, how recipients have reacted to that sender’s past emails and what the message contains. Their goal is to protect users from spam, phishing and unwanted mail.
Why does email deliverability matter?
If your emails do not reach the inbox, nobody reads them. Poor deliverability lowers open rates, clicks and sales from email marketing, and it can also stop password resets, order confirmations and invoices from reaching customers.
Deliverability problems also compound. When messages land in spam, fewer people engage with them, and mailbox providers treat low engagement as a sign that your mail is unwanted. Fixing a damaged sender reputation takes weeks, so it is easier to protect it from the start. For context on how much businesses rely on the channel, see our email statistics.
What are the Gmail and Yahoo sender requirements in 2026?
Google and Yahoo introduced shared sender requirements in February 2024, and they remain the baseline for anyone sending email in 2026. Google defines a bulk sender as one that has sent close to 5,000 or more messages to personal Gmail accounts in a single day. Once you reach that threshold, you are treated as a bulk sender permanently.
| Requirement | All senders | Bulk senders (5,000+ per day) |
|---|---|---|
| SPF or DKIM authentication | Required (at least one) | SPF and DKIM both required |
| DMARC record | Recommended | Required (policy can be p=none) |
| From: domain alignment | Recommended | Must align with the SPF or DKIM domain |
| Valid forward and reverse DNS (PTR) for sending IPs | Required | Required |
| TLS encryption for sending | Required by Gmail | Required by Gmail |
| Spam rate | Below 0.3% | Below 0.3%, aim for under 0.1% |
| One-click unsubscribe (RFC 8058) | Not required | Required for marketing and subscribed messages |
| Visible unsubscribe link in the body | Not required | Required |
| Honor unsubscribes | Best practice | Within 2 days (Yahoo); Google recommends within 48 hours |
| Message format | RFC 5322 compliant | RFC 5322 compliant |
Google also requires a DKIM key of at least 1,024 bits for mail sent to personal Gmail accounts and recommends 2,048 bits. Yahoo calculates its spam rate only on mail delivered to the inbox.
How Gmail enforces the rules
Google says enforcement is “gradual and progressive”. Since November 2025, Gmail has been ramping up enforcement on non-compliant traffic, which means messages that fail the requirements can receive temporary or permanent rejections, with error codes that name the failed requirement. Domains that are new to sending at volume face faster enforcement. Unauthenticated messages can be rejected with a 5.7.26 error.
What about Outlook and Microsoft?
Microsoft announced similar rules for Outlook.com, Hotmail and Live.com addresses in 2025: domains sending more than 5,000 messages a day must pass SPF, DKIM and DMARC. If you meet the Gmail and Yahoo bulk-sender rules, you generally meet Microsoft’s as well.
How do SPF, DKIM and DMARC work?
SPF, DKIM and DMARC are DNS records that prove your emails really come from your domain. You add them in your domain’s DNS settings, usually at your registrar or DNS host. If DNS is new to you, our guide on what DNS is explains the basics.
SPF (Sender Policy Framework)
An SPF record is a TXT record that lists the servers allowed to send email for your domain, such as Google Workspace, Microsoft 365 or your email marketing platform. Receiving servers check the sending IP address against that list. Keep SPF under the limit of 10 DNS lookups, or it can fail.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to each message. The receiving server uses a public key published in your DNS to confirm the message was not altered and was authorized by your domain. Each sending service you use should sign with its own DKIM key for your domain.
DMARC (Domain-based Message Authentication, Reporting and Conformance)
DMARC tells receivers what to do when a message fails SPF and DKIM alignment, and sends you reports about who is sending mail using your domain. A basic record looks like v=DMARC1; p=none; rua=mailto:[email protected]. Start with p=none to monitor, fix any legitimate senders that fail, then move to p=quarantine and eventually p=reject to block spoofing.
A DMARC policy of quarantine or reject also makes you eligible for BIMI, which can display your verified logo next to your emails in supporting inboxes.
What affects your sender reputation?
Sender reputation is a score mailbox providers assign to your sending domain and IP addresses. These factors have the biggest effect:
- Spam complaints: every time someone clicks “Report spam”, your reputation suffers. Gmail’s threshold is 0.3%, and Google recommends staying below 0.1%.
- Bounces: sending to invalid addresses signals a poorly maintained list.
- Spam traps: old or fake addresses that mailbox providers use to catch senders with bad list practices.
- Engagement: opens, replies, moving messages out of spam and adding you to contacts all help. Deleting without reading hurts.
- Sending consistency: sudden spikes in volume look suspicious, especially from a new domain or IP.
- Blocklists: listings on services such as Spamhaus can cause widespread blocking.
Gmail’s free Postmaster Tools shows your spam rate, authentication results and compliance status for Gmail recipients. Check it regularly if you send in volume.
How do you improve email deliverability?
Follow these practices to keep your emails in the inbox.
1. Authenticate every sending source
Set up SPF, DKIM and DMARC for your domain, and make sure every tool that sends on your behalf, such as your CRM, help desk, newsletter platform and e-commerce store, is covered. Use a custom domain for sending rather than a free webmail address, which cannot pass DMARC alignment for bulk mail.
2. Build your list with permission
Only email people who opted in. Never buy or rent lists. A confirmed (double) opt-in, where subscribers click a link to verify their address, reduces fake sign-ups and spam traps.
3. Keep your list clean
Remove hard bounces immediately and suppress addresses that have not opened or clicked in six to twelve months. Run a re-engagement campaign before removing them, and stop mailing anyone who does not respond.
4. Make unsubscribing easy
Add the List-Unsubscribe and List-Unsubscribe-Post headers for one-click unsubscribe, include a visible unsubscribe link in every marketing email and process opt-outs within two days. An easy exit is far better for your reputation than a spam complaint.
5. Warm up new domains and IPs
If you are starting with a new domain or a dedicated IP address, increase volume gradually over several weeks, starting with your most engaged subscribers. Most small and medium senders do better on their email platform’s shared IP pool. A dedicated IP makes sense mainly for consistent high-volume senders.
6. Send content people want
Segment your list, send relevant messages at a predictable frequency and use clear subject lines that match the content. Avoid misleading subject lines, large image-only emails and link shorteners. Include a plain-text version along with HTML.
7. Use a real reply-to address
A monitored reply address encourages replies, which are a strong positive engagement signal, and gives subscribers a way to reach you instead of hitting the spam button.
8. Monitor and test
Track bounces, complaints and engagement by mailbox provider. Use Google Postmaster Tools and your DMARC reports to catch authentication failures and spoofing early.
Does your domain name affect email deliverability?
Yes. Your sending domain carries its own reputation. A brand-new domain has no history, so warm it up slowly. Some businesses send marketing email from a subdomain, such as news.yourbrand.com, to keep marketing reputation separate from transactional mail. Choose a domain that clearly matches your brand so recipients recognize it. You can check domain availability with Namechk, and our guide on what a domain name is covers how domains and subdomains work.
FAQs
What is email deliverability?
Email deliverability is the ability of your emails to reach recipients’ inboxes rather than the spam folder or being rejected. It depends on sender authentication (SPF, DKIM and DMARC), your sender reputation, spam complaint rates, list quality and content. Deliverability differs from delivery rate, which only counts emails accepted by the receiving server, even if they land in spam.
What is a good spam complaint rate?
Gmail and Yahoo require senders to keep their spam complaint rate below 0.3%, and Google recommends staying below 0.1%. That means fewer than one complaint per 1,000 delivered messages. You can monitor your Gmail spam rate in Google Postmaster Tools. Rates at or above 0.3% lead to more mail going to spam and reduce eligibility for delivery support.
Who counts as a bulk sender for Gmail?
Google defines a bulk sender as anyone who has sent close to 5,000 or more messages to personal Gmail accounts within a 24-hour period. Messages from the same primary domain count together. Once you hit that threshold, Google treats you as a bulk sender permanently, so you must meet the stricter requirements, including SPF, DKIM, DMARC and one-click unsubscribe.
Do I need DMARC if I only send a few emails?
Gmail and Yahoo only require DMARC for bulk senders, but every domain that sends email should publish one. A DMARC record with p=none costs nothing, gives you reports on who is sending mail as your domain, and prepares you for stricter policies. Moving to p=quarantine or p=reject later also protects your brand from spoofing and phishing.
What is one-click unsubscribe?
One-click unsubscribe lets recipients opt out directly from the inbox interface without visiting a web page. Senders add a List-Unsubscribe header with an unsubscribe URL and a List-Unsubscribe-Post header, following RFC 8058. Gmail and Yahoo require it for bulk marketing and subscribed messages, along with a visible unsubscribe link in the email body, and Yahoo requires honoring requests within two days.
Why are my emails going to spam?
Emails usually go to spam because of missing or failing authentication (SPF, DKIM or DMARC), a high spam complaint rate, sending to old or purchased lists, sudden volume spikes from a new domain, or content that looks misleading. Check your DNS records, review Google Postmaster Tools, remove inactive subscribers and make sure everyone on your list opted in.
Should I use a dedicated IP address for email?
Most small and medium senders should use their email platform’s shared IP pool, which already has an established reputation. A dedicated IP address makes sense for high-volume senders with consistent daily volume, because you control the reputation yourself. A dedicated IP must be warmed up gradually over several weeks, and low or irregular volume can actually hurt deliverability.
CHK_ YOUR NAME RIGHT NOW
Use our engine to quickly check your content right now!
