The 2024 Gmail & Yahoo sender rules, explained for developers

In early 2024 Gmail and Yahoo turned a set of long-standing recommendations into hard requirements. If you send email in any volume, these are no longer optional. Here is what changed and exactly how to comply.

1. Authenticate every message

Both providers now require that your mail passes SPF and DKIM, and that at least one of them is aligned with the visible From domain. In practice this means:

• Publish an SPF record that authorises the servers sending on your behalf.
• Sign every message with DKIM using a key on your own domain.
• Publish a DMARC record, even a simple v=DMARC1; p=none; to start.

With BookMySpot, DKIM signing and the return-path that gives you SPF alignment are set up when you verify a domain, so this requirement is met the moment the checklist turns green.

2. Keep spam complaints under 0.3%

Gmail's Postmaster Tools now enforces a complaint-rate threshold. Stay well below 0.3% reported spam, and ideally under 0.1%. The biggest lever here is only mailing people who asked to hear from you, and making it trivial to stop.

3. One-click unsubscribe

Bulk senders must support one-click unsubscribe via the List-Unsubscribe and List-Unsubscribe-Post headers, and honour requests within two days. Transactional receipts are generally exempt, but marketing and lifecycle mail is not.

What this means for transactional senders

If you are sending password resets, receipts and notifications, the authentication rules apply to you too, complaint rate and unsubscribe are mostly about bulk mail. Get SPF, DKIM and DMARC aligned, keep your content relevant, and transactional mail stays in the inbox.