Learn · 6 minute read
Gmail and Yahoo’s email sender requirements, explained
Since February 2024, Gmail and Yahoo have required senders to authenticate their mail, make unsubscribing easy, and keep complaints low. The strictest rules apply to bulk senders, but the basics are worth meeting whatever your size.
Who the rules apply to
Google defines a bulk sender as anyone sending more than about 5,000 messages a day to personal Gmail addresses. Yahoo’s rules apply to bulk senders as well. If you cross that line once, Google treats you as a bulk sender from then on.
Below that threshold the strictest rules are not enforced the same way, but every sender is expected to have SPF or DKIM, and mail with no authentication is far more likely to be rejected or sent to spam. In practice you should meet all of them.
What is required
- Authenticate your mail. SPF and DKIM for the domain you send from. See SPF and DKIM.
- Publish a DMARC record. At minimum
p=none, and the From domain must align with SPF or DKIM. See DMARC. - One-click unsubscribe on marketing and subscribed mail: the
List-UnsubscribeandList-Unsubscribe-Postheaders, plus a visible link in the body. Unsubscribes should be honoured within two days. - Keep spam complaints low. Google asks for a spam rate under 0.10% in Postmaster Tools and says never to reach 0.30%.
- Send over TLS, and make sure the servers you send from have valid forward and reverse DNS.
- Format messages properly and do not impersonate Gmail’s own From addresses.
Transactional mail is treated differently, up to a point
The one-click unsubscribe rule is for marketing and subscribed mail. A password reset or a receipt does not need an unsubscribe link, and should not have one. Authentication, DMARC and a low complaint rate apply to everything you send from the domain.
How to check where you stand
- Check your domain’s SPF, DKIM and DMARC. Run your domain through the free domain checker to see it.
- Register the domain in Google Postmaster Tools. It shows your domain’s reputation and spam rate once you send enough mail for it to have data.
- If you send newsletters, check that each one has the unsubscribe header and a working link. SendSend adds both to every broadcast automatically.
Common questions
Do the Gmail and Yahoo rules apply to small senders?
The strictest requirements are for bulk senders, but authentication and low complaint rates matter for everyone. Unauthenticated mail from any size of sender is much more likely to be rejected or filtered.
What is one-click unsubscribe?
Two email headers, List-Unsubscribe and List-Unsubscribe-Post, that let Gmail and Yahoo show an unsubscribe button that works with a single click, without opening a web page. You should also keep a visible link in the message.
Does p=none satisfy the DMARC requirement?
Yes. The requirement is to publish a DMARC record, and p=none is a valid policy. It does not have to be quarantine or reject.
What spam rate is too high?
Google recommends staying under 0.10% and says never to reach 0.30%. Both are measured in Google Postmaster Tools, over messages delivered to Gmail users.
Keep reading
- What is DMARC, and how do you roll it out safely?
- Why your emails go to spam, and how to fix it
- An email deliverability checklist for small businesses
SendSend is an email API that checks these records for you and tells you when a domain is verified. Get started free.