2026-07-20 · Deliverability

Gmail & Yahoo Sender Requirements in 2026: What You Actually Need

To land in Gmail and Yahoo inboxes in 2026, every sender needs SPF or DKIM, and bulk senders — roughly 5,000+ messages a day to Gmail — need SPF, DKIM and DMARC (at least p=none), a From address that aligns with SPF or DKIM, a spam-complaint rate under 0.3%, and one-click unsubscribe on marketing mail. The big change: non-compliant bulk mail is now rejected, not just delayed.

This guide is drawn from Google’s and Yahoo’s own sender documentation (linked throughout) so you can verify each requirement yourself.

Who counts as a “bulk sender”?

Google defines bulk senders as those who send close to 5,000 messages or more per day to Gmail accounts, counted across your domains. Cross that line even once and Google treats you as a bulk sender going forward (Google Email sender guidelines). Yahoo applies its rules to bulk senders too but does not publish a specific per-day number (Yahoo Sender Best Practices).

If you send transactional mail from an app, marketing campaigns, or newsletters at any real volume, assume the bulk rules apply.

1. Authenticate: SPF, DKIM, and (for bulk) DMARC

All senders must set up SPF or DKIM, and have valid forward and reverse DNS (PTR) records for their sending IPs, and use a TLS connection (Google).

Bulk senders must go further:

p=none satisfies the letter of the rule, but it only monitors — it does not stop spoofing. Both providers expect you to publish DMARC and progress toward quarantine or reject over time. If you forward mail, Yahoo asks you to implement ARC (Yahoo).

2. Keep your spam rate under 0.3%

Both Google and Yahoo require you to keep the spam-complaint rate below 0.3%, as reported in Google Postmaster Tools (Google; Yahoo). Google specifically advises avoiding spikes and staying well under that number — treat 0.3% as a hard ceiling, not a target. Register for Postmaster Tools so you can actually see the figure.

3. Make unsubscribing one click

For marketing and subscribed messages, bulk senders must support one-click unsubscribe and include a clearly visible unsubscribe link in the body (Google). Technically that means two headers:

List-Unsubscribe: <https://example.com/unsubscribe?id=123>
List-Unsubscribe-Post: List-Unsubscribe=One-Click

The List-Unsubscribe-Post header implements the one-click method from RFC 8058, which Yahoo “highly recommends”, and Yahoo requires you to honour unsubscribe requests within 2 days (Yahoo).

What changed in 2025–2026

The core requirements took effect on 1 February 2024 for both providers (Google; Yahoo). What has shifted since is enforcement, not the rules:

Dates and enforcement stages change. The two provider pages linked below are the authoritative source — check them before relying on any specific date here.

The 2026 checklist

  1. SPF record published and passing.
  2. DKIM signing enabled (≥1024-bit) and passing.
  3. DMARC record published, passing, aligned — p=none at minimum, tightening over time.
  4. Valid PTR (reverse DNS) and TLS on your sending infrastructure.
  5. Spam rate well under 0.3% (watch it in Postmaster Tools).
  6. One-click unsubscribe headers on marketing mail; honour requests within 2 days.

You can confirm items 1–3 in seconds with our free SPF, DKIM and DMARC checkers, or run all five domain-health checks in one report.

Sources

Try it now — free, no signup. Check your DMARC