Gmail Sender Requirements in 2026: What Google Requires
Google announced its sender rules in October 2023, and they took effect on February 1, 2024. The requirements themselves have barely moved since. What changed is the penalty: from November 2025 Gmail is tougher on mail that does not comply, up to temporary and permanent rejections. Everything below comes from Google's email sender guidelines and their FAQ.
p=reject DMARC policy, that missing one-click unsubscribe sends mail to spam, and that mail to Google Workspace counts toward the 5,000 threshold. Google's documentation says none of that, so the text now follows it.Who the rules apply to
The rules cover personal Gmail accounts, meaning addresses ending in @gmail.com or @googlemail.com. Mail sent to Google Workspace accounts is not covered.
Google calls you a bulk sender if you have ever sent close to 5,000 messages or more to personal Gmail accounts within 24 hours. Mail from subdomains counts together with the primary domain. The status is permanent, so sending less later does not remove it, and new domains go through enforcement on an accelerated timetable.
Requirements for every sender
- SPF or DKIM for your sending domain. The DKIM key has to be at least 1024 bits, and Google recommends 2048.
- Valid forward and reverse DNS (PTR) for sending IPs.
- A TLS connection for sending mail. This item was added in December 2023.
- A spam rate in Postmaster Tools below 0.3%.
- Messages formatted according to RFC 5322.
- No impersonation of gmail.com in the From header, since Gmail is moving to a DMARC quarantine policy.
What changes at 5,000 messages a day
Authentication. Both SPF and DKIM, plus a DMARC record. Google says plainly that the policy can be p=none.
Alignment. The From domain has to match the SPF or the DKIM domain, compared at the organizational-domain level. You must set up both checks, but only one of them has to align. Forwarded mail and mailing lists are exempt. Google also expects alignment with both SPF and DKIM to become a requirement at some point.
One-click unsubscribe. Marketing and promotional mail needs List-Unsubscribe with an HTTPS URL plus List-Unsubscribe-Post, and a clearly visible unsubscribe link in the body. A mailto address or a plain unsubscribe link does not meet the requirement. Transactional mail (password resets, reservation confirmations, form submission confirmations) is excluded. Google recommends processing unsubscribe requests within 48 hours.
List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: <https://solarmora.com/unsubscribe/example>
Gmail shows its own unsubscribe button only on messages that pass its automated eligibility checks.
Spam rate: 0.1% and 0.3%
Google's advice is to stay below 0.10% and never reach 0.30%. The rate is calculated daily and shown in Postmaster Tools. Since June 2024, bulk senders above 0.3% are ineligible for mitigation, and they become eligible again after seven consecutive days below it.
What happens when you fall short
Google describes enforcement as gradual and progressive. From November 2025 it got stricter and can end in temporary or permanent rejections.
- Missing SPF or DKIM, no PTR, no TLS, a message that breaks RFC 5322, or no alignment: temporary or permanent error codes, or the spam folder.
- No DMARC record, no one-click unsubscribe, a spam rate above 0.3%, or unsubscribes not processed within 48 hours: delivery support and mitigations are unavailable.
The FAQ is explicit about unsubscribe: Gmail does not automatically reject or spam-folder mail just because one-click is missing. Unwanted mail that is hard to leave does get reported as spam more often, though, and that shows up in the spam rate.
Temporary error codes tell you which rule you broke: 4.7.23 is PTR, 4.7.27 is SPF, 4.7.29 is TLS, 4.7.30 is DKIM. 4.7.31 (no DMARC) and 4.7.32 (no alignment) come with rate limiting. Permanent failures use 5.7.25, 5.7.27, 5.7.29 and 5.7.30. 4.7.28 is a different case: you exceeded your quota, and Google asks you not to send anything for at least 10 minutes.
What DMARC policy does gmail.com use?
As of September 17, 2026 the record reads v=DMARC1; p=none; sp=quarantine. Google says Gmail will begin using a quarantine policy, and bulk senders who put an @gmail.com address in the From header already get temporary failures. It is google.com that publishes p=reject, which is probably where the confusion comes from.
Postmaster Tools
The Compliance status dashboard shows which requirements you meet. For every sender that means SPF and DKIM, DNS records, message format, encryption and spam rate. Bulk senders also see DMARC, one-click unsubscribe and honoring unsubscribes. The data is not real-time and usually updates within 24 hours.
Checklist
- SPF and DKIM on every service that sends as your domain, with a DKIM key of 1024 bits or more (2048 preferred).
- PTR on every sending IP and TLS when sending.
- A DMARC record of at least
p=none, with the From domain aligned to SPF or DKIM. - List-Unsubscribe with an HTTPS URL and List-Unsubscribe-Post on marketing mail, unsubscribes handled within 48 hours.
- A spam rate under 0.1% in Postmaster Tools.
- RFC 5322 formatting and no gmail.com in your From header.
Check the list before you send
One of Google's own suggestions is to automatically unsubscribe recipients who have multiple bounced messages, and it also suggests considering unsubscribing people who never open or read your mail. Dead addresses do not break a requirement on their own, but bounces and unwanted mail feed the spam rate, and that is the number Google is strictest about.
Upload your list to uChecker to see which addresses do not exist, which are disposable and which sit on catch-all domains. The first checks are free.
Sources
Mark Avrilov · Author
Published Updated