What is “One-Click Unsubscribe” and why is it now mandatory?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
You've probably seen it yourself. You open an email, spot the little "Unsubscribe" link right next to the sender name in Gmail, click it, and you're done. No landing page. No confirmation form. No "are you sure?" That's one-click unsubscribe in action.
Technically, it works through two email headers called List-Unsubscribe and List-Unsubscribe-Post. When a subscriber clicks that button inside their inbox, the mailbox provider sends a POST request to an endpoint you've specified. Your system receives it and removes that person. The subscriber never leaves their inbox at all.
Since early 2024, Yahoo Mail and Gmail require this for anyone sending more than 5,000 emails per day to personal Gmail or Yahoo accounts. It's part of a broader push from both providers to protect their users from inbox overload. The full rule is that you must process the unsubscribe request within two days of receiving it.
The reason this matters for your deliverability is straightforward. When someone can't find an easy way out, they hit "Report Spam" instead. That complaint counts against your complaint rate threshold, which Gmail and Yahoo both now monitor. One-click unsubscribe lets frustrated subscribers leave quietly instead of loudly.
Do you need to code this yourself? Probably not. Most major ESPs already add these headers automatically for you. Mailchimp, Klaviyo, Brevo, Postmark, and Twilio SendGrid all handle this natively (though it's worth double-checking your account settings rather than just assuming).
If you're sending through a custom mail setup or your own SMTP infrastructure, you'll need to add the headers manually. They look something like this:
List-Unsubscribe: <mailto:unsub@yourdomain.com>, <https://yourdomain.com/unsubscribe>List-Unsubscribe-Post: List-Unsubscribe=One-Click
And the second header is the important one. Without List-Unsubscribe-Post, the unsubscribe link may still show up in some inboxes, but it won't qualify as one-click compliant under the RFC 8058 standard that Gmail and Yahoo reference.
One thing that catches people out: the unsubscribe endpoint has to work. It can't redirect to a form, ask for a login, or silently fail. If the POST request hits a dead endpoint, you're not compliant even if the headers are there.
Not sure if your setup is handling this correctly? You can check your email headers with our free Email Header Analyzer to see exactly what your messages are broadcasting. Or if this is urgent, the SOS hotline is free and we'll walk through it with you.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
