Blue Canoe

Commercial site

Search Blue Canoe

Enter at least two characters.

Guides · reviewed 27 August 2026

Delivering mail to Gmail

Current Gmail authentication, subscription, reputation and Postmaster Tools requirements, separated from operational recommendations.

·

Google publishes requirements for mail sent to personal Gmail accounts. The rules distinguish all senders from domains that send more than 5,000 messages to Gmail accounts in a day.

These requirements do not guarantee inbox placement. They are the minimum conditions for reliable acceptance, alongside recipient choice and sender reputation.

Google began increasing enforcement against non-compliant traffic in November 2025, including temporary and permanent rejection responses. Use the current SMTP response and Postmaster compliance status rather than assuming an older warning-only phase still applies.

Requirements for every sender

Google requires senders to personal Gmail accounts to:

  • authenticate with SPF or DKIM;
  • give sending domains or IP addresses valid forward and reverse DNS records;
  • use TLS for transmission;
  • format messages in accordance with RFC 5322;
  • avoid impersonating Gmail From addresses;
  • keep the user-reported spam rate below 0.3%.

Google separately recommends keeping the Postmaster Tools spam rate below 0.1% and avoiding 0.3% or higher. The lower figure is the operating target; the higher figure is not a safe target.

Additional requirements above 5,000 messages a day

For a domain sending more than 5,000 messages in a day to personal Gmail accounts, Google requires:

  • both SPF and DKIM to be configured;
  • DMARC for the sending domain, with at least p=none;
  • the visible From domain to align with the authenticated SPF or DKIM domain for direct mail;
  • one-click unsubscribe on marketing and subscribed messages;
  • a clearly visible unsubscribe link in the message body;
  • unsubscribe requests to be honoured within two days.

Google counts messages sent from the same primary domain towards the threshold. Once classified as a bulk sender, a domain remains classified as one.

One-click unsubscribe means the HTTPS mechanism described by RFC 8058, using both headers:

List-Unsubscribe: <https://example.com/unsubscribe/opaque-token>
List-Unsubscribe-Post: List-Unsubscribe=One-Click

A mailto: option may also be present, but it does not replace the HTTPS one-click method for Gmail’s bulk-sender requirement.

Postmaster Tools

Google Postmaster Tools reports on mail sent to personal Gmail accounts. Its current dashboards include:

  • compliance status;
  • user-reported spam rate;
  • IP and domain reputation;
  • feedback loop data;
  • SPF, DKIM and DMARC authentication;
  • encryption;
  • delivery errors.

The Compliance Status dashboard evaluates primary domains. Data is not real time, and low-volume traffic may produce No data found to protect recipient privacy. Google says changes normally appear within 24 hours, but some compliance changes can take up to seven days to be reflected.

Google launched Postmaster Tools v2 in 2024. The legacy interface remains available for now, but Google encourages senders to move to v2 and says the older interface will eventually be retired.

Spam reporting and feedback

Postmaster Tools spam rate is based on DKIM-authenticated messages delivered to engaged users’ inboxes and then marked as spam. If Gmail already routes much of a stream to spam, the displayed rate can look deceptively low.

Google does not reveal individual recipients through its Feedback Loop. To diagnose campaigns, add a Feedback-ID header and use distinct identifiers that do not contain recipient data. The dashboard then shows which campaign identifiers generated complaints.

Google does not track open rates and cannot verify third-party open-rate measurements. Do not use opens as the sole definition of consent or engagement.

Diagnosing a Gmail failure

  1. Preserve the full SMTP response and its linked Google help page.
  2. Check the Postmaster compliance and delivery-error dashboards.
  3. Inspect a newly delivered message for SPF, DKIM and DMARC results.
  4. Check whether the visible From domain and authenticated identity are stable.
  5. Confirm that subscription and unsubscribe handling match the type of message.
  6. Look for an abrupt change in volume, recipients, application behaviour or account security.

Google does not operate a general allowlist or routine IP delisting form for email providers. Correct the reported condition and maintain compliant traffic. A Sender Contact Form may be available for qualifying delivery issues, but sufficient sending history and Postmaster data can be necessary for Google to assess a case.

Blue Canoe operating practice

When reputation or rate limiting is the supported diagnosis, pause questionable sources and continue only with mail that recipients are demonstrably expecting. Keep infrastructure and identity stable, avoid bursts, and increase volume gradually while monitoring SMTP responses and Postmaster data.

There is no defensible universal recovery percentage or fixed recovery period. The appropriate rate follows from the current queue, responses, reputation data and nature of the traffic.

Primary references

Reviewed against these sources on 27 August 2026.