The Three Pillars of Email Compliance
Google and Yahoo now require all bulk senders to implement these authentication protocols. Missing even one can result in email rejection.
SPF Authentication
SPF (Sender Policy Framework) tells receiving servers which IP addresses are authorized to send email for your domain.
Check your SPF record →DKIM Signing
DKIM adds a digital signature to your emails, proving they haven't been tampered with in transit.
Validate your DKIM →DMARC Policy
DMARC ties SPF and DKIM together and tells receivers what to do with emails that fail authentication.
Test your DMARC →Enforcement Timeline
Announcement
Google and Yahoo announce new email authentication requirements
Soft Enforcement Begins
Temporary errors for non-compliant emails; warnings sent to senders
Gradual Rejection
Increasing percentage of non-compliant emails rejected
Full Enforcement
One-click unsubscribe required; full rejection of non-compliant bulk email
Complete Requirements Checklist
For All Senders
Set up SPF authentication
Publish an SPF record listing authorized sending IPs
Set up DKIM signing
Sign outgoing emails with DKIM (minimum 1024-bit key, 2048-bit recommended)
Valid forward and reverse DNS
Sending IPs must have PTR records that resolve correctly
Use TLS for email transmission
Encrypt email connections with TLS 1.2 or higher. Check your TLS configuration
Keep spam rates below 0.3%
Monitor via Google Postmaster Tools; aim for under 0.1%
For Bulk Senders (5,000+ emails/day to Gmail)
Implement DMARC policy
At minimum p=none with reporting enabled. Check your DMARC
DMARC alignment required
The From: header domain must align with SPF or DKIM domain
One-click unsubscribe
Marketing emails must include List-Unsubscribe header with one-click option
Honor unsubscribes within 2 days
Process unsubscribe requests within 48 hours
Check Your Compliance Now
Run a free scan to see if your domain meets Google and Yahoo's email requirements. Get instant results and copy-ready fixes.
Run Free Security AuditFrequently Asked Questions
What counts as a "bulk sender"?
Google defines bulk senders as those who send approximately 5,000 or more messages to Gmail accounts within a 24-hour period. This is calculated per sending domain, not per IP address.
Do transactional emails need to comply?
Yes, all emails count toward the 5,000 threshold, including transactional emails like password resets and order confirmations. However, the one-click unsubscribe requirement only applies to marketing/promotional emails.
What DMARC policy do I need?
At minimum, you need p=none (monitoring mode). However, for better protection, you should work toward p=quarantine or p=reject. Use our DMARC checker to test your current policy.
How do I check my spam complaint rate?
Use Google Postmaster Tools (free) to monitor your spam rate for Gmail. You should keep it below 0.3%, but ideally under 0.1%. High spam rates can result in email rejection even with proper authentication.
Does Yahoo have the same requirements?
Yes, Yahoo has aligned with Google's requirements. Both require SPF, DKIM, DMARC, low spam rates, and one-click unsubscribe for bulk senders. Yahoo also introduced their Sender Hub for monitoring.