A practical roadmap for improving email deliverability

Deliverability improvement works best as a sequence, not a checklist tackled in parallel. Fixing content before authentication, or ramping volume before cleaning the list, wastes effort on improvements that get undermined by a problem addressed later. This roadmap orders the work by dependency.

Phase 1: authentication (week 1)

Nothing else on this roadmap matters if SPF, DKIM and DMARC aren't correctly configured and passing. This phase is mechanical and fast:

1. Confirm SPF includes every legitimate sending source - ESP, transactional system, any connected automation tool.
2. Confirm DKIM is signing correctly for each of those sources.
3. Publish DMARC at p=none if not already present, with rua set to an address you'll actually monitor.
4. Fix any failures found in the first aggregate reports before moving to phase 2.

Phase 2: list hygiene (weeks 2-3)

With authentication solid, clean the data that's actually being sent to:

1. Remove hard bounces immediately.
2. Suppress long-dormant contacts (90-180+ days with no engagement) from regular sends.
3. Validate any recently imported or migrated list segments.
4. Separate transactional from marketing sending wherever they currently share infrastructure.

Phase 3: warm-up and volume discipline (weeks 3-6)

Once the list and authentication are clean, address sending behavior:

1. For any newer or recently-reactivated domain, confirm volume is increasing gradually rather than jumping to full scale.
2. Segment sends by engagement tier so the most-engaged group produces the early positive signal.
3. Move DMARC from p=none toward p=quarantine once reports confirm clean alignment.

Phase 4: monitoring and enforcement (ongoing from week 6)

With the first three phases in place, shift to a sustaining cadence:

1. Weekly check of Postmaster Tools spam-rate band and DMARC aggregate reports.
2. Periodic seed-inbox placement testing, not just when a problem is suspected.
3. Move DMARC to p=reject once enforcement at p=quarantine has run cleanly for several weeks.

The roadmap as a table

What not to do

• Don't skip straight to volume or content fixes while authentication is still failing - any improvement there gets undermined by a DMARC or SPF gap underneath it.
• Don't run every phase in parallel to "save time" - a list-hygiene fix applied to a domain with broken authentication produces no measurable improvement, since the mail still isn't trusted.
• Don't treat phase 4 as optional once the first three are done - monitoring is what catches the next problem before it costs weeks of placement again.
• Don't move DMARC to p=reject before confirming, through aggregate reports, that every legitimate source is aligned - jumping to full enforcement too early can block your own mail.

A worked example: a company starting from a degraded domain

A company with a domain that's been sending for three years, but never monitored, starts this roadmap after noticing open rates have quietly dropped by half over six months. Phase 1 surfaces the actual starting problem: DMARC was never published at all, and SPF is missing a transactional tool added eighteen months earlier - so a meaningful share of legitimate mail has been failing authentication for over a year without anyone noticing, since nothing was monitoring it. Fixing both takes under a day of DNS changes.

Phase 2 then finds the compounding issue: the list hasn't been cleaned since it was built, and roughly 18% of it hasn't engaged in over a year. Suppressing that segment and clearing accumulated hard bounces drops the list from 40,000 to roughly 31,000 addresses - a smaller list, but one where the complaint and bounce rates the domain generates going forward are no longer being dragged down by addresses that were never going to engage again.

By phase 3, with authentication fixed and the list cleaned, the company finds it doesn't actually need a slow volume ramp - because sending continued throughout at roughly the same volume, there's no discontinuity for filters to flag, just a gradual improvement in the inputs. Phase 3 for this company is mostly segmenting by engagement tier and moving DMARC from p=none to p=quarantine once two weeks of aggregate reports confirm every legitimate source aligns. By week 8, Postmaster Tools shows the spam-rate band back in the healthy range and open rates have recovered most of the six-month decline - not because of any single fix, but because the roadmap's order meant each phase's improvement actually held instead of being undermined by a problem in an earlier phase.

MailPilot supports every phase of this roadmap directly: it checks SPF/DKIM/DMARC against what's actually published (phase 1), warms mailboxes gradually (phase 3), and tracks per-mailbox reputation and real inbox placement daily (phase 4) - so the roadmap above runs against live data rather than guesswork at each step.