DMARC requirements in 2026 — the current state of mandatory email authentication
What began in February 2024 as "Yahoogle" rules for bulk senders has hardened into the de-facto law of email. Here is exactly what the major receivers require in 2026, who counts as a bulk sender, and the minimum compliant setup.
The requirements, receiver by receiver
Google and Yahoo require ALL senders to have SPF or DKIM, valid forward and reverse DNS, and spam rates under 0.3% in Postmaster Tools. Senders above ~5,000 messages/day to Gmail additionally need: both SPF and DKIM, a DMARC record (p=none suffices — for now), From-domain alignment with SPF or DKIM, and RFC 8058 one-click unsubscribe on marketing mail.
Microsoft joined in 2025 with matching rules for senders of 5,000+ daily messages to Outlook/Hotmail: SPF, DKIM and DMARC at minimum p=none, with non-compliant mail first junked, later rejected. In practice the three providers cover the vast majority of Danish inboxes, so "bulk sender rules" are simply the rules.
Who is a "bulk sender"? Probably you
The 5,000/day threshold counts all mail from your domain to that provider — newsletters, invoices, order confirmations, support replies combined — measured on peak days, and once crossed, the classification tends to stick. A webshop with a modest newsletter crosses it on Black Friday. Aim for compliance regardless of volume: the requirements are simply good practice, and thresholds only move down.
The minimum compliant setup — and the sensible one
Minimum: an SPF record with your actual senders and ~all; DKIM signing at every service that sends as you; and a DMARC record — v=DMARC1; p=none; rua=mailto:reports@yourdomain.dk. That passes today's checks.
Sensible: treat p=none as a phase, not a destination. Receivers increasingly treat enforcement (quarantine/reject) as a positive signal, BIMI requires it, and p=none stops zero spoofing. Read your aggregate reports for a few weeks, fix alignment for legitimate senders, then step up. MonitorBase's free check shows where you stand against every 2026 requirement in about five seconds.
Free tools that help
- DMARC Inspector: Parse and grade your DMARC policy, reporting addresses and alignment settings.
- SPF Surveyor: Visualize the full SPF include tree and count DNS lookups against the limit of 10.