Email Deliverability for Shopify: Gmail and Yahoo Rules

Your open rate didn't drop because your subject lines got worse.

It dropped because Gmail and Yahoo stopped asking nicely. The new email deliverability Shopify rules come down to three requirements for anyone sending in bulk, and none of them are optional anymore:

1. Authenticate your domain. SPF and DKIM, plus a DMARC record (p=none is enough).
2. Offer one-click unsubscribe on every marketing email.
3. Keep your spam rate under 0.3%, and aim for under 0.1%.

Miss one and your Black Friday emails start landing in the spam folder, or get rejected outright. Hit all three and you're back in the game. Then the real work starts, which is making the email worth opening.

What exactly do Gmail and Yahoo require now?

Here's the short version, pulled straight from Google's email sender guidelines and Yahoo's sender best practices. Both have been in force since February 2024. What changed is the teeth. Google's FAQ says that starting November 2025, Gmail is ramping up enforcement on non-compliant traffic, and that failing messages will see disruptions, including rejections.

Requirement	Gmail (bulk senders)	Yahoo (bulk senders)
SPF and DKIM	Both required	Both required
DMARC	Required, p=none allowed	Required, at least p=none, must pass
From domain alignment	Must align with SPF or DKIM domain	DMARC must pass (needs alignment)
One-click unsubscribe	Required on marketing email, both List-Unsubscribe headers	Required, RFC 8058, POST highly recommended
Unsubscribe speed	Recommends within 48 hours	Honor within 2 days
Spam rate	Below 0.3%, aim below 0.1%	Below 0.3%
TLS and reverse DNS	Required	Valid forward and reverse DNS

So who counts as a bulk sender? Google defines it as anyone sending close to 5,000 messages or more to personal Gmail accounts in a single day. And here's the part founders miss. Google says senders who cross that line once are permanently considered bulk senders.

One Black Friday blast to your whole list. That's all it takes.

You don't become a bulk sender on a normal Tuesday. You become one on the biggest sending day of your year, which is exactly the day you can least afford to land in spam.

Why is my Shopify email going to spam?

I've looked at a lot of stores with this exact complaint. Open rates fell off a cliff over a few weeks, nothing changed in the creative, and the founder blames the subject line writer. Almost every time, it's one of three things.

The domain isn't authenticated. Shopify spells this out in its help center: if authentication records aren't configured, your sender address gets rewritten to store+123@shopifyemail.com. Your customer sees a weird address they don't recognize. Some of them hit report spam. Your reputation sinks.

DMARC is missing. This one catches people who think they're done. Shopify's automatic domain setup (through Cloudflare, GoDaddy or IONOS) adds the CNAME records but not the DMARC record. You have to add v=DMARC1; p=none; yourself as a TXT record, and your domain can only have one DMARC record. Shopify's own page says some providers, such as Gmail and Yahoo, require it.

The spam rate crept up. This is the quiet killer. Google's FAQ also says bulk senders above 0.3% aren't eligible for mitigation, and they only become eligible again after a full seven days back under the line. Seven days. During BFCM, that's the whole season.

Here's the math on how small 0.3% really is. Say a campaign lands in 20,000 Gmail inboxes. 0.3% of 20,000 is 60 people. Sixty clicks on "report spam" and you're over the line. At Google's 0.1% target, the ceiling is 20 people.

Twenty people. Out of twenty thousand.

How do I fix email deliverability for Shopify, step by step?

Do these in order. The first four take about an hour if you have access to your domain's DNS.

1. Get your sender address on your own domain. Not gmail.com, not yahoo.com. Use something like hello@yourbrand.com. In Shopify, that's Settings, then Notifications, then the Sender email section. (Shopify now calls its email product Shopify Messaging, formerly Shopify Email, so don't let the new name throw you.)

2. Authenticate the domain. Add the CNAME records Shopify gives you at your domain provider. Shopify says changes can take up to 48 hours to show up.

3. Add one DMARC record. v=DMARC1; p=none; on the _dmarc host. That satisfies both Gmail and Yahoo today. Tighten it later once your reports look clean.

4. Set up a branded sending domain in Klaviyo too. If you send campaigns and flows from Klaviyo, Shopify's settings don't cover those emails. Klaviyo's deliverability reference recommends that any account with 5,000 or more active email profiles set up a branded sending domain with DMARC.

5. Check one-click unsubscribe is on. Shopify told merchants when the rules launched that its infrastructure already covers one-click unsubscribe. If you send from another platform, check its settings. Your job is to confirm it, then never hide the unsubscribe link at the bottom in 8-point gray text.

6. Verify it worked. Open one of your emails in Gmail on a computer, click More, then Show original. Look for SPF, DKIM and DMARC. You want to see PASS on all three. Then register your domain in Google Postmaster Tools, where the Compliance status dashboard shows whether you meet each sender requirement. Google notes it can take up to 7 days for changes to show there.

7. Stop mailing people who stopped reading. This is the fix for the spam rate. More on that next.

Why is a low spam rate the hardest rule to keep?

Because the first five steps are setup. You do them once. The spam rate is behavior, and you have to earn it every single send.

And it got harder in July 2025. Gmail launched Manage subscriptions, a page that lists every brand mailing you, sorted by the most frequent senders, with a one-click unsubscribe that Gmail sends on the reader's behalf. Think about what that means for a store emailing daily through Q4. You're at the top of that list. Your subscriber didn't have to scroll to your footer. Gmail put the exit door in front of them.

Here's my take, and I'll stand behind it. That's a good thing for you.

A clean unsubscribe costs you nothing. A spam complaint costs you the inbox for everyone else on your list. So make leaving easy, and make staying worth it.

The practical move is a sunset flow. Klaviyo describes it as a last win-back attempt for people who stopped engaging, then you suppress anyone who doesn't respond. If you already run a Klaviyo winback flow, the sunset flow is its last email: one honest message, one clear choice, then you stop sending.

Klaviyo's own best-practice numbers are a useful scoreboard:

• Spam complaint rate below 0.01%
• Bounce rate below 1.0%
• Unsubscribe rate under 0.3%
• Open rate above 33%

One warning on that last one. Klaviyo notes that Apple Mail Privacy Protection can inflate open rates, so watch clicks and orders alongside opens. A big open rate with flat clicks usually means the opens aren't real.

How is AI changing email deliverability?

Two ways. One hurts you, one helps.

It hurts when it makes sending too easy. AI writes a campaign in minutes now. So founders send more. Five emails a week becomes nine, and every extra send to an unengaged subscriber is another shot at a spam complaint. Gmail's subscription page then shows that subscriber exactly how often you've been mailing them. The tool that saved you time just made you the most frequent sender in their inbox.

It helps when you use it as a diagnostic. The raw header from Show original is a wall of text most founders can't read. Google's help page points you to its Admin Toolbox Messageheader tool to analyze it. You can also paste it into any AI assistant and ask one question: "Did SPF, DKIM and DMARC pass, and which domain did each one use?" You'll get a plain answer in seconds, and you'll spot the alignment problem (a From address on one domain, DKIM signed by another) that hides inside most deliverability tickets.

AI should make your emails better, not more frequent. Use it to send fewer emails that people actually want, and to check the plumbing you can't read yourself.

The same goes for content. Use AI to write tighter welcome flow emails, not more of them. The stores that win the inbox in 2026 send less and say more.

What does fixing deliverability actually do to revenue?

Here's the math, and I want you to see both halves.

Run the numbers on a store like this, a hypothetical. Email campaigns send 3,000 visitors a week to a product page. That page converts at 2.5% with an $84 average order value. So its revenue per visitor is 2.5% x $84 = $2.10. On 3,000 visitors, that's $6,300 a week.

Now 30% of those emails slide into spam. 900 fewer visitors arrive. At $2.10 each, you just lost $1,890 a week. The page didn't change. The inbox did.

Inbox healthy, 3,000 visitors $6,300

30% in spam, 2,100 visitors $4,410

Visitors x conversion rate x average order value. 2.5% x $84 = $2.10 per visitor.

Fixing deliverability gets that $1,890 back. That's the floor.

But here's the thing. Deliverability only gets the subscriber to your page. What they're worth when they land is the page's job. Our bedding brand client went from a 1.0% conversion rate and a $125 average order value ($1.25 per visitor) to a 3.5% conversion rate and a $231 average order value. That's $8.10 per visitor on the same traffic. Real client numbers, not typical results, and not a promise of what your store will do.

So you can fix the inbox and keep sending people to a page that's leaking. Or you can fix the inbox and send them to a page that's printing. Same subscribers. Very different month. If your email clicks land on a page that was never built for warm traffic, read how to write a Shopify product page for email traffic next.

What to do next

Today, before you schedule a single Black Friday email, open your last campaign in Gmail and click Show original. If SPF, DKIM and DMARC don't all say PASS, fix that first. Your early access list for Black Friday is worth nothing if the launch email lands in spam. Then map the rest of your retention system with the Klaviyo flows for Shopify guide, and compare each flow's earnings against the 2026 Klaviyo benchmarks.

---

Book Your Profit Audit

Getting out of the spam folder brings your subscribers back to your product pages. On a free profit audit we'll show you what each of those visitors is worth right now, and how to rebuild a high-converting product sales page in less than 15 minutes.

Book Your Profit Audit →

Or go here to check it out → revenueflows.ai

P.S. The inbox decides who sees your email. The page decides what they're worth. Fix both before November 27.