# What is Email Deliverability? > What email deliverability means, how SPF, DKIM, and DMARC decide inbox placement, and the 2026 Gmail and Yahoo sender rules you now have to meet. [Email deliverability](/resources-post/email-deliverability-is-not-set-and-forget) is the ability of a message to reach the recipient's inbox rather than being blocked, bounced, or filed as [spam](/learning/understanding-spam-emails). It is distinct from *delivery* — a server accepting your message only means it wasn't rejected outright, not that it reached the inbox. Deliverability is the outcome that matters: the message lands where it can actually be seen and acted on. Three things decide it: how your domain authenticates (the technical setup), how mailbox providers rate your sending history (reputation), and what's inside the message (content). Authentication protocols — SPF, DKIM, and DMARC — are the part you control most directly, and in 2026 they are no longer optional for anyone sending at volume. ![The authentication records receivers check](/images/figures/deliverability-auth-records.webp) ## How email deliverability works A message passes through several checks between "send" and "inbox": The journey starts at your [email client (MUA)](/learning/what-is-an-mua). Your [mail transfer agent (MTA)](/learning/what-is-an-mta) uses [SMTP](/learning/what-is-smtp) to hand the message to the recipient's server, which it finds through the domain's [MX records](/learning/what-is-an-mx-record). That receiving server then evaluates: - **Authentication.** [SPF](/learning/what-is-spf) confirms the sending IP is authorized, [DKIM](/learning/what-is-dkim) verifies a cryptographic signature, and [DMARC](/learning/what-is-dmarc) checks that one of them aligns with the visible `From:` domain. A passing, aligned result is a strong trust signal. - **Sender reputation.** The provider weighs your domain's and IP's history — bounce rates, spam complaints, and sending consistency. A clean record earns the benefit of the doubt; a spike in complaints does the opposite. - **Content and engagement.** Filters look at message structure, link quality, and how past recipients engaged. Messages people open and reply to build reputation; messages people delete or report erode it. If the checks pass and reputation is healthy, the message reaches the inbox. If not, it may be filed to spam, quarantined, or refused. ## The 2026 sender requirements Since early 2024, and now fully enforced, Gmail, Yahoo, and Microsoft apply a shared baseline to any domain sending roughly **5,000 or more messages a day** to their users. Meeting it is the price of entry for bulk sending: - **SPF and DKIM both configured**, with at least one aligned so **DMARC** passes. A published DMARC record is required — `p=none` is an acceptable starting point, but providers expect movement toward `quarantine` or `reject`. - **A spam complaint rate kept below 0.3%.** Google recommends staying under 0.1%; 0.3% is where mitigation stops, not a safe target. - **One-click unsubscribe** (RFC 8058) on marketing mail, honored within two days. Transactional mail is exempt. - **Valid forward and reverse DNS** (a matching [PTR record](/learning/what-is-a-ptr-record)) and TLS on the sending connection. Non-compliant bulk mail is now rejected rather than quietly filtered, so these are gating requirements, not best-effort suggestions. ## Why deliverability matters - **Reaching your audience.** Newsletters, invoices, and password resets are worthless in a spam folder. High deliverability is what makes the rest of your email program work. - **Building trust.** Authenticated mail — especially with a [BIMI](/learning/what-is-bimi) logo displayed in supporting inboxes — signals legitimacy to recipients. - **Protecting reputation.** Consistent inbox placement compounds; repeated bounces and complaints drag your [domain reputation](/learning/what-is-a-domain-reputation) down and make future mail harder to deliver. - **Reducing risk.** Strong authentication makes it far harder for attackers to launch [phishing](/learning/what-is-phishing) or [spoofing](/learning/what-is-spoofing) campaigns under your name, which protects both your recipients and your sending reputation. ## How to improve deliverability - **Authenticate fully.** Publish SPF, DKIM, and DMARC, and confirm the results by reading [email headers](/learning/what-is-an-email-header) on test messages. - **Keep your list clean.** Remove invalid and inactive addresses to cut bounces, and send only to recipients who opted in to reduce complaints. - **Mind the content.** Avoid spam-trigger phrasing and excessive links; keep a healthy text-to-link ratio and a recognizable `From:` name. - **Harden the transport.** Ensure [MX](/learning/what-is-an-mx-record) and [PTR](/learning/what-is-a-ptr-record) records are correct, and consider [MTA-STS](/learning/what-is-mta-sts) to enforce TLS on inbound mail. - **Monitor continuously.** Watch [DNS](/learning/what-is-a-dns) settings and DMARC aggregate reports so a broken sender shows up in a report rather than in lost mail. Run a quick check of your domain's authentication and posture with the [Email Security Score](/tools/email-security-score). ## Frequently asked questions ### What's the difference between delivery and deliverability? Delivery means the receiving server accepted your message without rejecting it. Deliverability means it reached the inbox specifically, rather than the spam folder. You can have 100% delivery and poor deliverability if most of your mail is being filed as junk. ### Does authentication guarantee inbox placement? No. SPF, DKIM, and DMARC are necessary but not sufficient. They establish that you are who you claim to be; reputation and engagement decide whether that trusted sender lands in the inbox. Authentication removes a common reason for filtering — it doesn't override a poor complaint history. ### Why do my emails go to spam even though authentication passes? Usually reputation or content. A recent spike in spam complaints, a cold IP with no sending history, spam-like phrasing, or low engagement can all push authenticated mail to the spam folder. Check that your complaint rate is below 0.1% and that recipients are actually opening your mail. ### How long does it take to fix deliverability? Technical fixes (adding SPF, DKIM, DMARC, or a PTR record) take effect within DNS propagation — minutes to a couple of days. Reputation recovery is slower: mailbox providers want to see a sustained low complaint rate, often over one to several weeks, before they restore full inbox placement. ### Do the 2026 sender rules apply to small senders? The strict bulk thresholds target domains sending about 5,000+ messages a day to Gmail or Yahoo users. But the underlying requirements — SPF, DKIM, DMARC, a valid PTR, and TLS — are best practice for everyone, and small senders that follow them see steadier inbox placement too. ## Related reading - [What is email filtering and how does it prevent spam?](/learning/what-is-email-filtering-software-services-prevent-spam) - [What is email impersonation and how can you prevent it in 2025?](/learning/what-is-email-impersonation-and-how-can-you-prevent-it-in-2025) - [What is email spoofing and how can you prevent it?](/learning/what-is-email-spoofing-and-how-can-you-prevent-it)