Email Deliverability Best Practices: A 2026 Checklist
A comprehensive checklist of email deliverability best practices. Follow these guidelines to ensure your emails reach inboxes consistently.
Email deliverability isn't complicated, but it does require attention to many details. This checklist covers the best practices that matter most for getting your emails into inboxes. Use it as a reference when setting up email for a new domain or auditing an existing setup.
Authentication Setup
Authentication is the foundation of deliverability. Without it, nothing else matters.
SPF (Sender Policy Framework)
- [ ] SPF record exists for your sending domain
- [ ] All services that send email on your behalf are included
- [ ] Record uses appropriate mechanism (-all, ~all)
- [ ] Total DNS lookups stay under 10
- [ ] Record is tested and validated
Check your SPF record to verify configuration.
Common SPF mistakes:
- Forgetting to add a new email service
- Exceeding the 10-lookup limit
- Syntax errors that invalidate the record
- Using +all (allows anyone to send)
DKIM (DomainKeys Identified Mail)
- [ ] DKIM is enabled for each sending service
- [ ] Public key is published in DNS for each selector
- [ ] Signatures are being applied to outgoing email
- [ ] Signatures verify correctly at receiving servers
Test your DKIM configuration for each sending service.
Common DKIM mistakes:
- DNS record doesn't match sending configuration
- Key rotation without updating DNS
- Wrong selector being used
- DKIM disabled at the sending service
DMARC (Domain-based Message Authentication)
- [ ] DMARC record exists at _dmarc.yourdomain.com
- [ ] Policy is set (p=none for monitoring, p=quarantine or p=reject for enforcement)
- [ ] Aggregate reporting (rua) is configured
- [ ] Reports are being monitored
Verify your DMARC configuration and policy.
DMARC progression:
- Start with p=none to monitor
- Review reports to identify all legitimate senders
- Fix any authentication failures
- Increase to p=quarantine
- Eventually move to p=reject
MX Records
- [ ] MX records point to valid mail servers
- [ ] Records have appropriate priority settings
- [ ] Mail servers are responding properly
Check your MX records are correctly configured.
List Management
Your email list quality directly impacts deliverability.
Permission and Opt-In
- [ ] Only email people who explicitly opted in
- [ ] Use confirmed opt-in (double opt-in) for best quality
- [ ] Document when and how each address was collected
- [ ] Never purchase, rent, or scrape email lists
List Hygiene
- [ ] Remove hard bounces immediately
- [ ] Remove soft bounces after repeated failures
- [ ] Identify and remove spam trap addresses
- [ ] Re-engage or remove subscribers who haven't opened in 6+ months
- [ ] Regularly validate email list for invalid addresses
Unsubscribe Management
- [ ] Include unsubscribe link in every email
- [ ] Make the unsubscribe link easy to find
- [ ] Honor unsubscribe requests within 10 days (legal requirement)
- [ ] Actually honor requests immediately (best practice)
- [ ] Implement List-Unsubscribe header for one-click unsubscribe
Sending Practices
How you send matters as much as what you send.
Volume Management
- [ ] Maintain consistent sending volumes
- [ ] Avoid sudden spikes (increase gradually if needed)
- [ ] Warm up new domains/IPs before sending at volume
- [ ] Match sending volume to list engagement
Frequency Management
- [ ] Set clear expectations at signup for email frequency
- [ ] Stick to the frequency you promised
- [ ] Offer frequency preferences to subscribers
- [ ] Don't bombard subscribers with too many emails
Timing
- [ ] Send at consistent times
- [ ] Test different send times for optimal engagement
- [ ] Consider recipient time zones
- [ ] Spread large sends over time rather than blasting all at once
Content Best Practices
Content affects both spam filtering and engagement.
Email Structure
- [ ] Include both HTML and plain text versions
- [ ] Use proper HTML structure
- [ ] Maintain reasonable image-to-text ratio
- [ ] Include alt text for images
- [ ] Test rendering across email clients
Subject Lines
- [ ] Write clear, accurate subject lines
- [ ] Avoid all caps and excessive punctuation
- [ ] Don't use misleading or deceptive subjects
- [ ] Keep subjects under 50 characters for mobile
- [ ] Avoid known spam trigger patterns
Body Content
- [ ] Deliver on the promise of your subject line
- [ ] Provide value in every email
- [ ] Use clear calls to action
- [ ] Avoid spam-associated phrases when possible
- [ ] Include your physical mailing address (required for commercial email)
Links
- [ ] Use full URLs instead of URL shorteners
- [ ] Link to reputable, established domains
- [ ] Don't use too many links in a single email
- [ ] Ensure link text matches the actual URL
- [ ] Verify all links work before sending
Technical Configuration
Technical details that affect deliverability.
Infrastructure
- [ ] Sending IPs have proper reverse DNS (PTR records)
- [ ] Sending IPs are not on major blacklists
- [ ] TLS encryption is enabled for email transmission
- [ ] Mail servers are properly configured
Headers
- [ ] From address uses your authenticated domain
- [ ] Reply-To address is valid and monitored
- [ ] All required headers are present
- [ ] Headers are properly formatted
Sending Domain
- [ ] Domain has been registered for sufficient time
- [ ] Domain is not on any blacklists
- [ ] DNS is properly configured
- [ ] Domain matches your brand and is recognizable
Monitoring and Maintenance
Ongoing attention keeps deliverability healthy.
Regular Monitoring
- [ ] Monitor bounce rates (target under 2%)
- [ ] Track spam complaint rates (target under 0.1%)
- [ ] Watch open and click rates for trends
- [ ] Check blacklist status regularly
- [ ] Review authentication pass rates
Check blacklist status for your domain regularly.
Use Provider Tools
- [ ] Set up Google Postmaster Tools for Gmail insights
- [ ] Configure Microsoft SNDS for Outlook data
- [ ] Enroll in feedback loops where available
- [ ] Monitor any dashboards your ESP provides
Regular Audits
- [ ] Audit authentication setup quarterly
- [ ] Review list quality and clean as needed
- [ ] Test inbox placement periodically
- [ ] Check DNS records haven't changed unexpectedly
Compliance Requirements
Stay legal and ethical.
CAN-SPAM (US)
- [ ] Don't use deceptive headers or subject lines
- [ ] Identify the message as an advertisement (if applicable)
- [ ] Include your physical postal address
- [ ] Honor opt-out requests within 10 business days
- [ ] Monitor what others do on your behalf
GDPR (EU/UK)
- [ ] Have legal basis for processing (consent for marketing)
- [ ] Provide clear privacy information
- [ ] Enable data subject rights (access, deletion)
- [ ] Maintain records of consent
- [ ] Report breaches within 72 hours
CASL (Canada)
- [ ] Obtain express consent before sending
- [ ] Identify yourself clearly
- [ ] Provide working unsubscribe mechanism
- [ ] Keep consent records for duration + 3 years
Quick Wins Checklist
If you're just getting started, prioritize these:
- [ ] Set up SPF, DKIM, and DMARC
- [ ] Verify authentication is passing
- [ ] Check for blacklist listings
- [ ] Clean obvious bad addresses from your list
- [ ] Add clear unsubscribe links
- [ ] Set up basic monitoring
Common Mistakes to Avoid
- Buying email lists
- Sending to old, unengaged lists
- Ignoring bounce messages
- Using authentication-free sending
- Sudden volume increases without warmup
- Misleading subject lines
- Hidden or difficult unsubscribe processes
- Ignoring spam complaints
- Not monitoring deliverability metrics
Stop Worrying About Email Deliverability
The Email Deliverability Suite monitors your SPF, DKIM, DMARC, MX records and blacklist status daily. Get alerts when something breaks — before your emails stop arriving.
Monitor everything, automatically
SPF, DKIM, DMARC, MX, and blacklist monitoring for unlimited domains. $39/month.