The Email Deliverability Guide (Gmail & Yahoo Era)

Deliverability is the unglamorous foundation of every email program. You can write the best campaign in the world; if it lands in spam, it doesn't exist. This guide covers the fundamentals that actually move the needle in 2026 — and skips the folklore.

Authentication: SPF, DKIM, DMARC

Three DNS-based standards prove you are who you say you are. Mailbox providers treat them as table stakes.

• SPF (Sender Policy Framework): a DNS record listing which servers may send for your domain. Receivers reject mail from servers not on the list.
• DKIM (DomainKeys Identified Mail): a cryptographic signature on each message that proves the content wasn't altered in transit. Use at least a 1024-bit key.
• DMARC: ties SPF and DKIM together, requires alignment with your From: domain, and tells receivers what to do on failure. Start at p=none to monitor, then move to quarantine and reject once your reports are clean.

Alignment is the part teams miss: the domain in your From: header must match the SPF or DKIM domain for DMARC to pass. Most modern ESPs — including Brew, Resend, and Klaviyo — walk you through publishing these records, and some configure DKIM/SPF/DMARC for you.

The Gmail & Yahoo bulk-sender rules

In February 2024, Google and Yahoo began enforcing requirements that reshaped the baseline. They distinguish between all senders and bulk senders — defined as anyone sending roughly 5,000 or more messages per day to their users.

List hygiene and engagement

Providers increasingly infer wanted-ness from engagement. The mechanics of authentication get you to the door; engagement decides whether you reach the inbox or the Promotions tab — or spam.

• Use confirmed opt-in where practical, and never buy lists.
• Sunset unengaged subscribers — people who haven't opened in 90–180 days drag down your reputation.
• Honor unsubscribes within 48 hours, and make the one-click option real, not a maze.
• Segment so your best content goes to your most engaged people first.

Warming up a domain or IP

Reputation is earned gradually. A brand-new sending domain that suddenly blasts 100,000 messages looks exactly like a spammer. Ramp volume over days and weeks, starting with your most engaged subscribers, so providers build a positive history for you. This matters as much when you adopt a new platform as when you start from scratch.

Content and rendering factors

Content rarely lands you in spam on its own anymore, but sloppy email still hurts. Maintain a sensible text-to-image ratio, avoid link shorteners and spam-trigger phrasing, keep your HTML clean, and make sure messages render across clients. Our on-brand design guide covers cross-client rendering in depth; tools like Brew and Resend generate inbox-safe HTML specifically to avoid these issues.

Monitoring

Set up Google Postmaster Tools and Yahoo's equivalent, point your DMARC rua tag at a mailbox or a monitoring service, and watch complaint rate, authentication results, and reputation. Deliverability is a maintained state, not a one-time setup.