by Isabella Torres · Last updated: 2026-04-26

Email Deliverability Checklist: 20 Steps to Hit the Inbox in 2026

You spent hours on your campaign. The copy is sharp, the design is polished, the offer is compelling. Then 30% of your list never sees it. Not because they ignored it — because their inbox provider buried it in spam or promotions before they had a chance to read the subject line. That is an email deliverability problem, and it is the single biggest silent killer of email marketing ROI.

You can test this on your own domain right now: run it through our free SPF, DKIM and DMARC checker or the blacklist checker for an instant report.

Email deliverability is your inbox placement rate — the percentage of sent emails that actually arrive in the primary inbox rather than the spam folder, promotions tab, or nowhere at all. It differs from delivery rate, which only measures whether the receiving server accepted the message. A 98% delivery rate can coexist with a 70% inbox placement rate, meaning nearly a third of your emails are technically delivered but functionally invisible.

This email deliverability checklist breaks the problem into 20 concrete steps across five areas: authentication, sender reputation, list health, content hygiene, and sending practices. Follow them in order. Each step builds on the previous one, and skipping early steps makes later ones far less effective.

Why Emails Land in Spam

Before working through the checklist, you need to understand the three systems deciding your fate. Mailbox providers like Gmail, Outlook, and Yahoo run every inbound email through layered filtering that evaluates your technical setup, your historical sending behavior, and the content of each individual message.

Authentication failures are binary — you either pass or your email is immediately suspect. Reputation scoring is cumulative and historical, built over weeks and months of sending behavior. Content analysis is per-message and increasingly powered by machine learning models that evaluate semantic meaning rather than simple keyword matching. A 2025 report from Litmus on email deliverability trends found that AI-based content filtering now accounts for the majority of spam decisions at major mailbox providers, up from pattern-matching approaches that dominated just two years earlier.

The practical takeaway: you cannot fix deliverability with a single change. It requires systematic attention across all three layers. That is exactly what this checklist provides.

Authentication Setup (Steps 1–4)

Authentication tells mailbox providers that your emails are legitimately sent by you. Without it, anyone can spoof your domain. These four steps are non-negotiable prerequisites for every other deliverability improvement.

Step 1: Publish an SPF record. SPF (Sender Policy Framework) is a DNS TXT record that lists every IP address and server authorized to send email on behalf of your domain. When a receiving server gets an email claiming to be from your domain, it checks this record. If the sending IP is not listed, the email fails SPF and is far more likely to be filtered. Keep your SPF record under 10 DNS lookups — exceeding this limit causes automatic failure, which is a common misconfiguration when businesses use multiple third-party tools that each require their own SPF include.

Step 2: Enable DKIM signing. DKIM (DomainKeys Identified Mail) attaches a cryptographic signature to every outbound email. The receiving server verifies this signature against a public key published in your DNS. This proves the email was not altered in transit and genuinely originated from your domain. Use 2048-bit keys as a minimum — 1024-bit keys are considered weak and some providers are beginning to penalize them. Rotate your DKIM keys at least once per year.

Step 3: Set a DMARC policy. DMARC (Domain-based Message Authentication, Reporting, and Conformance) tells receiving servers what to do when an email fails SPF and DKIM checks. Start with p=none to collect reports without affecting delivery. Once you confirm all legitimate sending sources are authenticated, move to p=quarantine (spam folder) and ultimately p=reject (block entirely). Google and Yahoo both require DMARC records for bulk senders as of 2024, and enforcement has only tightened since.

Step 4: Use a custom sending domain. Sending from yourbrand.com rather than a shared ESP subdomain like mail.espprovider.com ensures your reputation is entirely under your control. A shared domain means other senders’ bad behavior can drag your deliverability down. Most email platforms, including Mailsoftly, allow you to configure a custom sending domain in minutes by adding a few DNS records.

Sender Reputation (Steps 5–8)

Your sender reputation is a score that mailbox providers assign based on your historical sending patterns. It is the single most influential factor in inbox placement after authentication. Think of it as a credit score for email — hard to build, easy to damage, and slow to recover.

Step 5: Use a dedicated IP for volume sending. If you send more than 50,000 emails per month, a dedicated IP address isolates your reputation from other senders. On a shared IP, one bad actor can tank deliverability for everyone. Below 50,000, shared IPs managed by reputable ESPs are usually fine because the provider actively polices their pool. According to HubSpot’s email deliverability research, senders on dedicated IPs with clean lists consistently see inbox placement rates 10–15 percentage points higher than those on poorly managed shared pools.

Step 6: Warm up new IPs and domains. Sending 100,000 emails from a brand-new IP on day one is the fastest way to get blacklisted. Mailbox providers treat sudden high volume from unknown sources as spam behavior. Instead, start with a few hundred emails per day to your most engaged subscribers and increase volume by 20–30% daily over two to four weeks. The same principle applies to new domains — even with perfect authentication, a domain with no sending history has no positive reputation to draw on.

Step 7: Monitor blacklists regularly. DNS-based blacklists (DNSBLs) like Spamhaus, Barracuda, and SORBS maintain lists of IPs and domains known for sending spam. If your IP appears on one, your emails will be blocked or filtered by every provider that references that list. Check your status weekly using tools like MXToolbox or your ESP’s built-in monitoring. If you are listed, most blacklists have a removal request process — but the underlying cause (usually high complaint rates or spam traps) must be fixed first, or you will be re-listed within days.

Step 8: Maintain a sender score above 80. Sender score, tracked by services like Validity’s Sender Score, ranges from 0 to 100. Scores below 70 typically result in significant filtering. Scores above 80 indicate healthy sending practices. The score factors in complaint rates, unknown user rates, spam trap hits, and volume consistency. Check your score monthly and investigate any drops immediately — a 10-point decline usually signals a specific event like a bad list import or a sudden volume spike.

List Health (Steps 9–12)

Your list is either an asset or a liability. Every invalid address, disengaged subscriber, and unprocessed bounce actively erodes your sender reputation. These four steps keep your list clean enough to sustain high inbox placement.

Step 9: Require double opt-in. Double opt-in means subscribers confirm their email address by clicking a link in a verification email before being added to your list. This eliminates typos, fake addresses, and bot signups in a single step. Yes, it reduces signup conversion rates by 15–25%. But the subscribers who confirm are dramatically more engaged, and your list starts clean instead of requiring constant remediation. For any sender serious about long-term deliverability, double opt-in is the default choice.

Step 10: Remove hard bounces immediately. A hard bounce means the email address does not exist — the receiving server permanently rejected delivery. Continuing to send to hard-bounced addresses signals to mailbox providers that you are not maintaining your list, which directly damages your sender reputation. Your ESP should handle this automatically, but verify that hard bounces are being suppressed after the first occurrence, not the second or third. Some platforms are more aggressive than others, so check your bounce handling settings.

Step 11: Suppress unsubscribers instantly. This should be automatic, but the CAN-SPAM Act requires processing unsubscribe requests within 10 business days, and GDPR requires it without undue delay. Best practice is real-time suppression. Beyond legal compliance, continuing to email people who explicitly asked to stop is the fastest way to generate spam complaints — and spam complaint rate is the metric mailbox providers weight most heavily when deciding your reputation.

Step 12: Run re-engagement campaigns before purging. Subscribers who have not opened or clicked in 90–180 days are dragging down your engagement metrics, which hurts deliverability. But before deleting them, send a targeted re-engagement sequence — typically two to three emails asking if they still want to hear from you, often with a compelling offer or content piece. Anyone who does not engage after the sequence should be moved to a suppression list. This approach recovers 5–15% of inactive subscribers while cleaning the rest.

Content Hygiene (Steps 13–16)

Even with perfect authentication and a clean list, the content of your individual emails can trigger spam filters. Modern filters analyze structural elements, text patterns, and semantic intent. These four steps keep your content out of the danger zone.

Step 13: Maintain a healthy text-to-image ratio. Emails that are predominantly images with minimal text are a classic spam signal. Spammers use image-heavy emails to evade text-based filtering. Aim for at least 60% text and no more than 40% images by content area. Every image should have descriptive alt text — both for accessibility and because some spam filters flag images without alt attributes. If your design team pushes for image-only emails, remind them that many recipients block images by default, which means an image-heavy email may render as a blank white screen.

Step 14: Avoid spam trigger words and patterns. While modern spam filters are far more sophisticated than simple keyword matching, certain patterns still raise flags. ALL CAPS subject lines, excessive exclamation marks, and phrases like “act now,” “free money,” and “guaranteed winner” still trigger basic filters. More importantly, AI-based filters now evaluate the overall semantic tone of your email. High-pressure urgency language combined with commercial intent and low-reputation sending infrastructure is the combination that triggers modern spam classification. Moderate your language, focus on value rather than hype, and test every campaign with a spam-check tool before sending.

Step 15: Include a functional unsubscribe link. Every marketing email must have a visible, working unsubscribe mechanism. This is required by CAN-SPAM, GDPR, CASL, and virtually every other anti-spam law. But beyond compliance, the unsubscribe link actually protects your deliverability. When subscribers cannot find the unsubscribe link, they hit the “Report Spam” button instead — and spam complaints are far more damaging to your sender reputation than unsubscribes. Make the unsubscribe link easy to find (not buried in 8pt grey text) and ensure it works with a single click. Google’s 2024 sender guidelines explicitly require one-click unsubscribe headers for bulk senders.

Step 16: Include a physical mailing address. CAN-SPAM requires a valid physical postal address in every commercial email. This is typically placed in the email footer alongside the unsubscribe link. It can be a street address, a PO box, or a registered commercial mail receiving agency address. Omitting it is a legal violation and a spam filter signal. There is no reason to skip this — if you do not want to use your home address, a virtual mailbox costs less than $15 per month.

Sending Practices (Steps 17–20)

How you send matters as much as what you send. Erratic volume, massive single blasts, and untested campaigns are deliverability killers that many marketers overlook because they focus entirely on content and list quality.

Step 17: Maintain a consistent sending schedule. Mailbox providers track your sending patterns over time. If you normally send 10,000 emails per week and suddenly send 100,000 in a single day, that spike looks like compromised account behavior or spam. Establish a regular cadence — whether that is daily, weekly, or biweekly — and stick to it. Consistency builds positive pattern recognition with inbox providers. If you need to increase volume, do it gradually over several weeks, not overnight.

Step 18: Segment instead of blasting your entire list. Sending the same email to every subscriber is not just poor marketing — it actively hurts deliverability. Untargeted sends generate lower engagement rates, which signals to mailbox providers that recipients do not want your emails. Segment by engagement level, purchase history, interests, or lifecycle stage, and send relevant content to each group. A Statista analysis of email marketing effectiveness consistently shows segmented campaigns generating significantly higher open and click rates compared to non-segmented sends — and those engagement signals directly improve your deliverability.

Step 19: Throttle large sends. When you need to email a large list, spread the send across several hours rather than firing everything at once. Most ESPs offer send-rate throttling that lets you control how many emails go out per hour. This prevents sudden volume spikes that trigger rate limiting or temporary blocks from receiving servers. A general guideline: if your normal daily volume is X, do not exceed 3X in any given hour. For new IPs or domains, the threshold is even lower.

Step 20: Test every campaign before sending. Send test emails to accounts on Gmail, Outlook, Yahoo, and Apple Mail before every campaign. Check rendering across email clients, verify all links work, confirm the unsubscribe process functions, and run the email through a spam scoring tool. Many deliverability problems are preventable — broken links, missing unsubscribe headers, and rendering issues that cause recipients to mark emails as spam out of frustration rather than malice. Mailsoftly includes built-in preview and spam score testing to catch these issues before they reach your subscribers.

Putting It All Together: Your Monitoring Dashboard

A checklist is only useful if you track compliance over time. Set up a simple deliverability monitoring routine that reviews these metrics weekly.

Track these numbers over time, not just as single snapshots. A gradually declining open rate over six weeks is a more reliable deliverability signal than any single metric on a given day. Build a simple spreadsheet or use your ESP’s built-in analytics to log weekly values and spot trends before they become crises.

Frequently Asked Questions

What is a good email deliverability rate?

A good inbox placement rate is 95% or higher. This means 95 out of every 100 emails you send land in the primary inbox rather than spam, promotions, or being silently dropped. Note that this is different from delivery rate, which is typically 97–99% for healthy senders and only measures server acceptance, not inbox placement. If your ESP reports a 98% delivery rate but your open rates are unusually low, the gap is almost certainly a deliverability issue — your emails are being accepted but filtered.

Why do my emails go to spam even with authentication set up?

Authentication is necessary but not sufficient. If your SPF, DKIM, and DMARC are all passing but emails still land in spam, the problem is usually sender reputation or content quality. Common culprits include a high spam complaint rate (even 0.3% is enough to trigger filtering), sending to old or purchased lists that contain spam traps, inconsistent sending volume, or content that triggers semantic spam analysis. Check your sender score, review your complaint rate trends, and audit your list for inactive subscribers who may be hurting engagement metrics.

How do I check my email deliverability?

Start with your ESP’s built-in analytics — look at delivery rate, open rate, and bounce rate trends over time. For deeper analysis, use tools like Google Postmaster Tools (free, shows your domain’s reputation with Gmail), Validity Sender Score (rates your sending IP from 0–100), and MXToolbox (checks blacklist status). Send test emails to seed accounts at Gmail, Outlook, and Yahoo to manually verify inbox placement. For ongoing monitoring, services like Mailsoftly provide deliverability dashboards that consolidate these signals into a single view so you can spot problems before they affect your entire list.

Does email list size affect deliverability?

List size itself does not hurt deliverability — list quality does. A 500,000-subscriber list with 98% engagement, proper segmentation, and clean hygiene will outperform a 5,000-subscriber list full of purchased contacts and stale addresses. However, larger lists amplify the impact of problems. A 2% hard bounce rate on a 1,000-person list means 20 bounces; the same rate on a 200,000-person list means 4,000 bounces, which generates a much stronger negative signal. The larger your list, the more critical systematic hygiene becomes.

Isabella Torres

Growth Marketing Specialist at Mailsoftly

Isabella is a Growth Marketing Specialist at Mailsoftly with expertise in list building, subscriber retention, and subject line optimization. She writes actionable guides for marketers who want measurable results from email.