What are the key requirements introduced by Gmail and Yahoo in 2024?

In early 2024, Gmail and Yahoo Mail did something they'd never done before. They coordinated on a shared set of rules for bulk senders and said: meet these, or your emails don't get through. Together, they cover the majority of consumer inboxes worldwide, so this wasn't optional for anyone sending at scale.

Here's what they actually required:

• Email authentication. You need SPF, DKIM, and DMARC set up on your sending domain. Not just present, but aligned. That means the domain in your From address needs to match what your authentication records are protecting. (More on exactly what's required here.)
• One-click unsubscribe. Marketing emails must include a List-Unsubscribe header that lets people opt out in a single click, with requests honored within two days. No more buried links or multi-step goodbye flows.
• Spam complaint rates below 0.3%. The target is actually under 0.1%. If you send 100,000 emails and 300 people mark you as spam, you're already in trouble. Gmail measures this through Postmaster Tools, and it's worth watching.
• Valid reverse DNS. Your sending IP needs a PTR record that resolves properly. Most reputable ESPs handle this for you, but it's worth confirming.
• TLS encryption. Emails in transit need to be encrypted. Again, most modern sending infrastructure does this automatically.

The authentication piece is where most senders stumble, especially the DMARC requirement. A lot of domains had SPF and DKIM in place but no DMARC policy at all, which meant they were technically failing even with authentication records set up. (And "at p=none" barely counts for this purpose.)

Not sure if your domain is set up correctly? Our free DMARC Generator can help you build the right record, and the SPF Checker will tell you if your SPF record is valid in about 30 seconds.