Email Deliverability in 2026: SPF, DKIM, DMARC, and the Inbox Rules That Actually Matter
Deliverability isn't a black box — it's a checklist. Most of it is setup once, monitor weekly. Miss any of the four and you're talking to spam folders.
No credit card · Free forever plan · Cancel anytime · Month-to-month
275M+
Verified contacts
Unlimited
Credits on every paid plan
96–98%
Email deliverability
$29
Starting price / month
01 / 04
Step 1: Authentication (SPF, DKIM, DMARC)
SPF — DNS TXT record listing which servers can send for your domain. Example: v=spf1 include:_spf.google.com ~all
DKIM — cryptographic signature added to every outgoing email, validated against a public key in DNS. Your ESP generates the key; you paste it into DNS.
DMARC — policy telling receivers what to do when SPF or DKIM fails. Start with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com, then graduate to p=quarantine, then p=reject.
Verify with mxtoolbox.com or dmarcian.com after each change.
02 / 04
Step 2: Warm-up schedule
Day
Sends/day
Notes
1–3
10–20
Warm-up service only
4–7
30–50
Add a few manual replies
8–14
60–120
Start small cold-outreach campaigns
15–30
150–300
Ramp 10%/day if open rate >30%
30+
300–500
Steady state; max 500/day/inbox
03 / 04
Step 3: List hygiene
Verify every email — SMTP + MX + catch-all check. HuntMeLeads does this automatically; standalone tools (NeverBounce, ZeroBounce) cost ~$8/1,000 verifications.
Skip catch-all domains — they accept everything but route to a black hole. Bounce rate looks low but engagement is zero, which hurts reputation.
Suppress complainers + unsubscribes globally — across every campaign, every domain.
Drop role accounts (info@, sales@, contact@) — high complaint rate, low conversion.
04 / 04
Step 4: Message structure
Plain text only in the first email — no HTML, no images, no fancy fonts.
No links in email #1 — links to unfamiliar domains lower inbox placement.
No tracking pixel on cold — many ESPs flag pixel-loaded cold mail as spam.
Under 90 words — long cold emails correlate with spam folder placement.
Real sender name + reply-to matching the from-address.
Poor sender reputation, not content. New domains without SPF + DKIM + DMARC properly aligned, no warm-up, and sending volume that ramps too fast all hurt reputation before a recipient ever sees the message. Fix the auth + warm-up before tweaking subject lines.
Yes — as of Feb 2024, Google and Yahoo require DMARC for any sender pushing more than 5,000 messages/day to their inboxes, and they recommend it for everyone else. Start with p=none (monitoring), graduate to p=quarantine within 30 days, then p=reject. Skipping DMARC effectively caps deliverability.
Find verified emails + protect your deliverability
HuntMeLeads verifies every email before you send. Unlimited credits, $29/mo flat.