How to Whitelist an Email Address in Gmail, Outlook and Yahoo

"Whitelisting" an email address means telling your mail service that you always want to receive messages from it, so that they are not sent to spam or junk. People look for it when an important message keeps getting lost: a newsletter they asked for, an invoice, a message from a school or a notice from a bank. This guide explains how to whitelist an email address in Gmail, Outlook, Yahoo and Apple Mail, how administrators can allow a sender across a whole organisation, why it sometimes does not work, and what senders can do to ask recipients to add them in a way that is simple and honest.

What does whitelisting do, and what does it not do?

An allow list tells your own mail service to trust a sender. It is a setting on the receiving side, so it only affects the mailbox you change. It can stop messages from being moved to spam by the provider's filters, though it does not always override every protection. A message can still be blocked outright if it fails authentication badly, contains a known threat or is refused by your organisation's security tools before it reaches your inbox.

It does not fix a sender's reputation, and it does not help anyone else who receives the same message. If you are a sender, the lasting fix is good authentication and a clean list, not a request that every recipient whitelist you.

How to whitelist an email in Gmail

Method 1: Add the sender to your contacts

1. Open the message.
2. Hover over the sender's name and choose to add them to contacts, or open Google Contacts and add the address.

Gmail pays attention to people you have written to or saved, and messages from them are more likely to reach the inbox. It is a signal, not a guarantee.

Method 2: Create a filter that never sends the sender to spam

1. Open Gmail settings and choose to see all settings.
2. Go to Filters and Blocked Addresses and choose to create a new filter.
3. In the From field enter the address, or a whole domain written as @example.com.
4. Choose to continue, then tick Never send it to Spam. You can also tick Always mark it as important.
5. Create the filter.

Method 3: Rescue a message that is already in spam

Open the Spam folder, open the message and choose Report not spam. This teaches Gmail that you want these messages, and it moves the current one to your inbox.

Check the Promotions and Updates tabs too

Gmail sorts some mail into tabs. A message that is not in spam may be in Promotions. If that is the problem, our guide on the Gmail Promotions tab explains what you can change.

How to whitelist an email in Outlook

Outlook on the web (Outlook.com and Microsoft 365)

1. Open Settings and find the Junk email section under Mail.
2. Under Safe senders and domains, choose to add a sender.
3. Enter the address, or a domain such as example.com, and save.

Outlook desktop

1. On the Home tab, open the Junk menu.
2. Choose Junk E-mail Options, then the Safe Senders tab.
3. Click Add and enter the address or domain.

You can also right-click a message in the junk folder and choose to mark it as not junk, with an option to always trust the sender.

How to whitelist an email in Yahoo Mail and Apple Mail

• Yahoo Mail: Open the Spam folder, select the message and choose Not spam. You can also create a filter in the settings that sends mail from a given sender to the inbox.
• Apple Mail and iCloud: Add the sender to your Contacts, and move any message from the Junk mailbox back to the inbox, which marks it as not junk. iCloud Mail on the web also has a rules option in its settings.
• Phones: The mail apps on phones use the same account settings as the web version, so make the change on your provider's website or in the full app.

How administrators allow a sender across an organisation

In a company or school, a mail administrator can allow a sender for everyone. Both Google Workspace and Microsoft 365 have admin settings for approved senders and allow lists, and the names and locations change, so check your provider's current documentation.

Take care. An allow list entry that skips filtering is a security hole if it is too broad. A few principles help.

• Allow the narrowest thing you can, such as one sending address and not a whole popular domain.
• Prefer allowing by authenticated identity, not by display name or the visible From address alone, since those are easy to forge. See email authentication explained.
• Check that the sender authenticates first. If a legitimate sender fails SPF or DKIM, ask them to fix it. Bypassing the checks for them leaves a door open for anyone who can forge that address.
• Review the list regularly and remove entries that are no longer needed.

Why whitelisting sometimes does not work

• The message is blocked before it reaches your mailbox. An organisation's gateway or a security filter may quarantine it. Ask your administrator to check the quarantine.
• The sender fails authentication. The provider treats the message as likely forged.
• You entered the wrong address. Some senders use a different address for each message, or send through a service with its own address. Check the real sending address in the headers; see how to read email headers.
• A forwarding rule is rewriting the sender. See email forwarding explained.
• The mailbox is full. A full mailbox refuses new mail whatever your settings say.
• The sender was blocked. A block list overrides an allow list in many systems, so check that the address is not on both.

If you are the sender: how to ask people to whitelist you

Many senders add a line such as "Add us to your contacts so our emails reach your inbox". It is a harmless request when it is honest and kept simple. A few suggestions:

1. Put the request on your confirmation page and in your welcome email, where the reader has just chosen to hear from you.
2. Use one stable sending address, so that the request makes sense. A different address for every campaign makes it useless.
3. Keep it short, and show the steps for the most common providers on a help page rather than in each message.
4. Never rely on it. Recipients forget, and most will not do it.

The better path is to be a sender that providers want to deliver. Authenticate your domain, send only to people who asked, remove bad addresses, make unsubscribing easy and watch your complaint and bounce rates. Our spam checker guide shows how to test a message before you send it, and the reputation monitoring feature helps you see problems early.

Whitelisting and security: a warning

Scammers like to make a message look as if it came from a trusted address. If a message asks you to whitelist its sender in order to read an important notice, treat it with suspicion. Real services do not need you to change security settings to deliver a bill. Never whitelist an address on the word of an unexpected email.

References and further reading

• Gmail Help: create rules to filter your emails
• RFC 7489: DMARC
• RFC 5322: Internet Message Format