Prerequisites
- OneSignal Email is enabled on your app.
- You’re sending from a custom domain. Sending with a
gmail.comorgooglemail.comFrom: address is not allowed. - You have access to your domain’s DNS records.
1. Verify SPF, DKIM, and DMARC
SPF and DKIM are required for all senders. DMARC is required for bulk senders, but you should publish it regardless because it’s the only way to enforce From: alignment and prevent spoofing.| Record | Required for | Purpose |
|---|---|---|
| SPF | All senders | Lists the mail servers permitted to send on behalf of your domain. |
| DKIM | All senders | Cryptographic signature that proves the message wasn’t altered in transit. |
| DMARC | Bulk senders | Policy that tells receivers what to do when SPF or DKIM fails, and requires alignment with your From: domain. |
p=none is “monitor only” mode. It satisfies the bulk sender requirement without affecting deliverability. Tighten to p=quarantine or p=reject once you’ve reviewed a few weeks of DMARC reports.
2. Align your From: header with your domain
DMARC alignment requires the domain in your From: header to match the domain that signs DKIM or appears in SPF. If you use a dedicated sending subdomain likeemail.example.com, your From: address must use the root domain:
- Correct:
news@example.com - Incorrect:
news@email.example.com
3. Enable one-click unsubscribe
Bulk senders sending marketing email must include a one-click unsubscribe option and must process opt-outs within two days. OneSignal handles both required pieces:- List-Unsubscribe header. Added automatically to every OneSignal email so inbox providers can display a one-click unsubscribe button in their UI.
- Unsubscribe link in the body. Use the
[unsubscribe_url]token in your email content. OneSignal renders it as a working unsubscribe link for each recipient.
Transactional emails (receipts, password resets, two-factor codes) are exempt from the one-click unsubscribe requirement. Marketing emails are not.
4. Monitor your spam rate
Gmail and Yahoo require all senders to keep their reported spam rate below 0.3%. Above that threshold, messages start getting filtered or rejected. OneSignal’s Acceptable Use Policy is stricter at 0.08%.| Provider | Where to monitor |
|---|---|
| Gmail | Google Postmaster Tools. The only source for Gmail-specific spam rates. |
| Yahoo and Outlook | Email reputation dashboard in OneSignal (feedback loop providers). |
FAQ
Am I a bulk sender?
You’re classified as a bulk sender as soon as you send 5,000 or more emails to Gmail addresses (or 5,000 to Yahoo addresses) within any 24-hour period. The classification is per-domain and per-provider, and it’s permanent. It does not expire if your daily volume later drops.Do these requirements apply to transactional email?
SPF, DKIM, From: alignment, valid DNS, TLS, and RFC 5322 formatting apply to all senders regardless of volume or message type. DMARC and one-click unsubscribe only apply to bulk senders sending marketing email. Transactional messages (receipts, password resets, and similar) are exempt from the unsubscribe requirement but should still authenticate properly.What happens if I don’t meet these requirements?
Gmail and Yahoo will start throttling, filtering to spam, or rejecting your mail. The deliverability damage compounds over time and is hard to reverse once your domain reputation drops. There is no warning period and no appeals process for individual messages.Does OneSignal set up SPF, DKIM, and DMARC for me?
OneSignal provides the SPF and DKIM record values for you to add to your DNS during email setup. DMARC is your responsibility. You publish the DMARC TXT record on your root domain. See Email DNS configuration.How do I check if my DMARC is aligned?
Send a test email to the address shown at About My Email. The tool reports back on SPF, DKIM, DMARC, and alignment for the message you sent.Do these rules apply to Outlook, Apple Mail, or other providers?
The Gmail and Yahoo policy is specific to those two providers, but the underlying requirements (SPF, DKIM, DMARC, low spam rates, easy unsubscribe) are best practices for every major inbox provider. Meeting these requirements improves deliverability across the board.Related pages
Email deliverability
Sender reputation, bounce and spam thresholds, and the full bulk sender policy.
Email DNS configuration
Set up SPF, DKIM, and DMARC records for your sending domain.
Email unsubscribe links and headers
Manage unsubscribe links and List-Unsubscribe headers.
Google Postmaster Tools
Monitor Gmail spam rate and domain reputation.