Email Deliverability: How to Actually Reach the Inbox

'Delivered' is not 'inbox': authentication, reputation and list health are the three gates an email passes — or fails — on the way.

"Sent" and "delivered" are not the same thing, and mailbox providers never tell you the difference. Your email platform will happily report a 100% send rate on a campaign that mostly landed in spam. That gap is deliverability, and it's the reason a well-written email with a good subject line can still get a 4% open rate — not because nobody wanted to read it, but because nobody's inbox ever showed it to them.

This guide is the technical and reputation half of email marketing. For the strategy side — list building, campaign types, send cadence — see our email marketing guide. This page covers what happens after you hit send: how Gmail, Outlook and Yahoo actually decide where your email goes.

What email deliverability actually means

Deliverability is inbox placement, not delivery. "Delivered" just means a mailbox server accepted your email onto its infrastructure — it says nothing about which folder it ends up in. An email can be delivered and still land in spam, in a promotions tab, or get silently filtered with no bounce at all.

Mailbox providers like Gmail, Outlook and Yahoo run every incoming email through spam filters that score dozens of signals in real time — your domain's history, your authentication setup, how many people open versus delete versus report your mail, even how many people you're mailing today compared to last week. The score decides the folder. None of it is visible in your email service provider's (ESP) dashboard, which is why "100% delivered" and "nobody's opening this" can both be true at once.

SPF, DKIM and DMARC: the authentication basics, in plain English

These three are DNS records that prove an email claiming to be from your domain actually came from you and wasn't tampered with in transit. Mailbox providers check all three before they trust your mail — this is exactly the "spf dkim dmarc" search a lot of people land on this page with, usually after a deliverability problem started.

Here's why you need all three together, not just one. SPF alone can be spoofed by forwarding tricks. DKIM alone proves the content is intact but not that the sending server was authorised. DMARC is what ties the two together and tells mailbox providers what to actually do about a failure — without it, SPF and DKIM are just informational, not enforced. A domain with SPF and DKIM but no DMARC record is still an easy target for someone spoofing your brand in a phishing email, which — beyond the direct damage — quietly wrecks the sending reputation of your real domain too.

None of this needs to become a DNS tutorial to be useful here: the practical takeaway is that if you've never checked whether all three are correctly configured for every domain and subdomain you send from (including the ones your marketing tools send on your behalf), that's the first thing to verify — most ESPs and website hosts have a settings page that shows pass/fail status for each record without you touching raw DNS syntax.

Sender reputation: the score you can't see but everything depends on

Authentication proves you are who you say you are. Reputation is a separate, ongoing score of whether mailbox providers trust what you send. It's rebuilt with every campaign, and it's the single biggest lever on inbox placement over time.

• List hygiene. Mailing addresses that bounce, that were never opted in, or that have gone quiet for a year all drag reputation down. A smaller list of people who actually open your mail outperforms a larger list padded with dead weight.
• Engagement rates. Opens, clicks, replies and "move to inbox" actions tell mailbox providers your mail is wanted. Consistently low engagement is read as a signal to start filtering you, even if nobody's actively marking you as spam.
• Spam-trap avoidance. Spam traps are email addresses mailbox providers and blocklist operators seed specifically to catch senders with bad list-collection habits — old abandoned addresses reactivated as traps, or addresses that were never real to begin with. Hitting even a few traps in a campaign can hurt reputation disproportionately, because it signals your list wasn't properly opted in or hasn't been cleaned in years.
• Consistent sending volume. A sudden jump from 2,000 emails a week to 50,000 reads as suspicious to mailbox providers, regardless of intent — it's a common signature of a compromised account or a purchased list being blasted out. Reputation is built on predictability.

Common mistakes that tank deliverability

Most deliverability problems trace back to one of a handful of avoidable habits.

1. Buying an email list. Purchased lists are disproportionately full of spam traps, dead addresses and people who never asked to hear from you — the fastest way to burn a domain's reputation, often within a single campaign.
2. Sudden volume spikes. Launching a new list, migrating ESPs, or trying to clear a backlog by mailing everyone at once all look identical to abusive sending from a mailbox provider's side. Ramp volume up gradually instead, especially on a new domain or IP.
3. Ignoring bounce and complaint rates. A bounce rate above roughly 2% or a spam-complaint rate above roughly 0.1% are the thresholds most major mailbox providers treat as red flags — and by the time you notice the symptom (falling opens), the reputation damage is often already done. Monitor these numbers after every send, not just when something feels wrong.
4. Never removing inactive subscribers. People who haven't opened anything in 6-12 months are actively hurting the campaigns still going to people who do open. A regular list-cleaning cadence protects the senders you actually want to reach.
5. Treating every domain and subdomain the same. A marketing subdomain with a poor reputation can, in some configurations, affect trust in the root domain. Keep transactional email (receipts, password resets) and marketing email on separate, correctly authenticated subdomains where your ESP supports it.

Deliverability monitoring: what the tool category actually does

"Email deliverability tools" is a real search a lot of frustrated senders run — usually right after a campaign underperforms. Being straightforward about this category: deliverability monitoring platforms don't fix deliverability for you. What they do is make the invisible visible — inbox placement testing across major providers, blocklist monitoring, authentication-record checking, and reputation tracking over time — so you can catch a problem before it becomes a pattern across months of campaigns.

Two worth knowing about because they're free and run directly by the mailbox providers themselves, not third-party vendors: Google Postmaster Tools shows your domain's reputation, spam-rate and authentication status as seen by Gmail specifically, and Microsoft SNDS (Smart Network Data Services) does the equivalent for Outlook/Hotmail. Beyond those two, there's a broader category of paid deliverability-monitoring platforms with more providers and more automation — features and pricing there change often enough that we won't name specific products or claim specific numbers here. Whichever you use, the job is the same: check it regularly, not only after a campaign already underperformed.