Email Deliverability Basics: What Actually Lands You in the Inbox

Email deliverability basics: SPF, DKIM, DMARC, list hygiene, and engagement — what actually decides inbox vs spam in 2026, and how to fix each factor.

Email deliverability — whether your emails reach the inbox or the spam folder — comes down to four things: authenticating your domain (SPF, DKIM, DMARC), keeping a clean engaged list, sending content people want, and maintaining a consistent sending reputation. The platform you use matters far less than these fundamentals. This guide covers each one and how to fix it.

Flat editorial illustration of an inbox door opening with an envelope entering, in deep navy, paper white, and warm amber

What deliverability actually means

Deliverability is the percentage of sent emails that reach the inbox (not the spam folder, not blocked). It is different from the delivery rate your platform reports — delivery just means the receiving server accepted the message, which includes mail accepted straight into spam. A 99% delivery rate with a 70% inbox placement rate means nearly a third of your emails are technically delivered and practically invisible.

Mailbox providers (Gmail, Outlook, Yahoo) decide placement with filters that weigh hundreds of signals, but they cluster into four buckets: authentication (are you who you claim to be?), reputation (what is your sending history?), engagement (do recipients want your mail?), and content (does this message look like spam?). Fix them in that order — authentication is binary and fast, content tweaks are marginal until the first three are solid.

Authentication: SPF, DKIM, DMARC

Authentication is the non-negotiable foundation. Without it, you are asking mailbox providers to trust an unverified sender.

  • SPF (Sender Policy Framework): a DNS record listing which servers may send mail for your domain. Your email platform gives you the records to add. If a spammer forges your domain from elsewhere, SPF lets receivers reject it.
  • DKIM (DomainKeys Identified Mail): a cryptographic signature your platform adds to each email, verified against a public key in your DNS. It proves the message was not altered in transit and genuinely came from your authorized sender.
  • DMARC: a policy telling receivers what to do when SPF or DKIM fail — monitor (p=none), quarantine, or reject. Gmail and Yahoo’s 2024 sender requirements made DMARC effectively mandatory for bulk senders, and that enforcement has only tightened since.

How to set it up: every major platform (Mailchimp, Brevo, Kit, ActiveCampaign, MailerLite) has domain-authentication settings that generate the exact DNS records. Add all three records at your DNS host, then verify with the platform’s checker or an independent authentication tester before sending campaigns. This takes under an hour and is the highest-ROI deliverability work that exists.

The common failure: switching platforms without re-authenticating. The old platform’s DKIM keys do not transfer — the new platform needs its own records. More migrations break on this than on anything else; our switching guide covers the full checklist.

List hygiene

Mailbox providers watch what happens after delivery. High bounce rates and spam complaints tell them your list is bad; they respond by filtering more of your mail. Hygiene is how you keep the signals clean:

  • Remove hard bounces immediately. A bounce rate above 2% is a red flag; most platforms auto-suppress hard bounces, but verify yours does.
  • Suppress complainers. A complaint rate above 0.1% (1 per 1,000) triggers filtering at Gmail and Yahoo. Never re-mail someone who marked you as spam.
  • Sunset the unengaged. Contacts who have not opened in 6–12 months drag down engagement rates. Run a re-engagement campaign, then stop mailing non-responders — or move them to a very low cadence.
  • Never buy lists. Purchased lists generate bounces, complaints, and spam traps (abandoned addresses repurposed to catch spammers). One spam-trap hit can damage a sender reputation for weeks.
  • Use confirmed opt-in for cold sources. If subscribers come from events, partners, or imports, a confirmation email keeps bots and typos out of your list.

Hygiene has a financial bonus on contact-billed platforms: Mailchimp and ActiveCampaign (new accounts) charge for unsubscribed and inactive contacts, so cleaning directly lowers the bill. Our list-cleaning guide is the full walkthrough.

Engagement: the hidden ranking factor

Gmail and friends track whether recipients open, reply to, and move your emails out of spam — and they use it as a reputation signal. A list of 10,000 with 15% opens outranks a list of 50,000 with 5% opens, even though the second list is bigger. Engagement is why list quality beats list size for deliverability.

What moves engagement:

  • Send to people who asked. The single biggest factor. Confirmed opt-in lists outperform everything else.
  • Segment by engagement. Mail your most engaged contacts most often; reduce cadence for the cooling. Most platforms (including Brevo’s Standard tier and MailerLite’s automations) support engagement-based segments out of the box.
  • Make the first emails count. Welcome sequences get the highest open rates of any email type — they set the engagement baseline mailbox providers remember.
  • Prune ruthlessly. Every unengaged contact you keep mailing lowers your average engagement. Smaller, hotter lists deliver better than big, cold ones. Counterintuitive, consistently true.

Content and spam triggers

Content matters less than authentication and engagement, but it still matters — especially the technical parts:

  • Avoid classic spam patterns: ALL CAPS subject lines, excessive exclamation marks, “FREE!!!” promises, and URL shorteners. Modern filters are subtler than keyword lists, but the classics still score badly.
  • Balance text and images. Image-only emails look like the spam of 2010 because they were. Keep a healthy text-to-image ratio and always include alt text.
  • Include a physical address and unsubscribe link. Legally required in most jurisdictions (CAN-SPAM, GDPR), and their absence is a spam signal.
  • Watch your links. Too many links, mismatched display URLs, or links to flagged domains hurt. Link to your own domain where possible.
  • Test before sending. Mail-tester style tools score your email against SpamAssassin rules and authentication checks. A quick test catches the embarrassing failures — missing DMARC, broken authentication, trigger-heavy copy.

The deeper truth: “spam trigger words” lists are mostly folklore now. Filters are behavioral and reputation-based. A trusted sender can write “free” in the subject line; an untrusted sender gets filtered writing perfect prose.

Flat editorial illustration of an envelope navigating a path through filter gates, in deep navy, paper white, and warm amber

Sending reputation and infrastructure

Your reputation lives in two places: your domain and your sending IP. On shared IP pools (the default on every platform’s standard plans), your reputation is blended with other senders — which is why platforms police their pools aggressively. MailerLite, for example, reserves the right to monitor accounts to protect shared-IP reputation (per its pricing-page FAQ).

What you control:

  • Consistency. Send on a steady cadence from consistent infrastructure. Spiky sending (nothing for months, then 100,000 at once) looks like a compromised account.
  • Warmup. New domains and new IPs need gradual volume ramp-up — 2–4 weeks starting with your most engaged segment. This applies after platform migrations too.
  • Dedicated IPs (available on enterprise tiers — e.g., Brevo Enterprise, ActiveCampaign Enterprise) give you full control of your reputation, but they start with zero reputation and need 4–6 weeks of careful warmup. For most small businesses, a well-maintained shared pool outperforms a cold dedicated IP.
  • Separate streams. If you send both marketing and transactional email, keep them on separate subdomains or services. A promotional blast should never jeopardize password-reset delivery. Brevo includes transactional email even on its free plan, which makes stream separation easy.

Diagnosing a deliverability problem

When inbox placement drops, diagnose in order:

  1. Check authentication first. Run an SPF/DKIM/DMARC check. A DNS change, platform switch, or expired record breaks this silently.
  2. Check your rates. Bounce rate over 2%? Complaint rate over 0.1%? Sudden open-rate cliff on one mailbox provider (Gmail fine, Outlook filtering)? Each pattern points somewhere specific.
  3. Check recent changes. New list import, new template, new sending domain, increased frequency — deliverability drops almost always follow a change.
  4. Check blocklists. Look up your sending IPs and domain on major blocklists. Shared-pool neighbors can get the pool listed; your platform’s support should confirm and remediate.
  5. Segment and test. Send your next campaign to the 30-day engaged segment only. If placement recovers, the problem is list quality, not infrastructure.

Most deliverability “mysteries” resolve to one of: broken authentication, a bad list import, or mailing unengaged contacts too often. Fix those three and the mystery usually disappears.

  • Deliverability = inbox placement, not delivery rate. Four buckets: authentication, reputation, engagement, content — fix in that order.
  • SPF, DKIM, and DMARC are mandatory for bulk senders; set all three up before any real campaign.
  • List hygiene (bounces under 2%, complaints under 0.1%, sunset the unengaged) is the ongoing work that protects reputation.
  • Engagement is a ranking factor: smaller, hotter lists beat big, cold ones.
  • Diagnose drops in order: authentication → rates → recent changes → blocklists → segment test.

FAQs

What is a good email deliverability rate?

Aim for 95%+ inbox placement. Delivery rates (accepted by the server) run 98–99% on healthy accounts, but inbox placement is the number that matters — check it with seed-list testing, not just your platform’s dashboard.

Do I need SPF, DKIM, and DMARC?

Yes. Gmail and Yahoo require authentication for bulk senders, and all three records working together is the standard. SPF and DKIM prove legitimacy; DMARC tells receivers what to do when checks fail. Setup takes under an hour in your platform’s domain settings.

Why are my emails going to spam all of a sudden?

The most common causes: broken authentication (check DNS after any platform or domain change), a recent list import with bad addresses, mailing unengaged contacts, or a complaint spike. Diagnose in that order before changing content.

Does the email platform affect deliverability?

Less than most marketing claims. All major platforms run reputable infrastructure; authentication, list quality, and engagement dominate. Platform choice matters at the margins — dedicated IPs, deliverability support tiers, and how aggressively the platform polices its shared pools.

Should I get a dedicated IP?

Probably not, unless you send high volume (100,000+/month) consistently. Dedicated IPs start with zero reputation and need 4–6 weeks of warmup. Most small businesses get better placement from a well-maintained shared pool.

How often should I clean my email list?

Continuously and automatically: suppress hard bounces immediately, sunset contacts unengaged for 6–12 months, and do a full audit quarterly. Our list-cleaning guide has the step-by-step process.

Conclusion

Inbox placement is not a trick — it is the compound interest of doing the basics right. Authenticate your domain completely, mail only people who want your mail, prune the ones who do not, keep your cadence consistent, and warm up carefully after any change. Do that and the platform logo in the corner barely matters; skip it and no platform will save you. Start with authentication today — it is an hour’s work and the highest-leverage deliverability fix there is.