How to Whitelist an Email Address in Gmail (Safe Sender List)

Gmail blocks more than 99.9% of spam, phishing, and malware — and the same aggressive filter that keeps junk out occasionally buries a message you actually wanted. The fix people search for is a whitelist, but Gmail has no button by that name. I whitelisted a few stubborn senders myself — a billing address, a small newsletter, a client whose replies kept vanishing — and the real mechanism is a filter with Never send it to Spam, backed up by Contacts and the Not spam button. Here is exactly how to build a safe sender list that holds, for one address or a whole domain.

There Is No Whitelist Button

Gmail has no single “whitelist” or “safe sender list” you can open and edit. You whitelist a sender by combining three signals: a filter with Never send it to Spam, an entry in Google Contacts, and clicking Not spam on flagged mail. Together they tell Gmail a sender is always wanted.

The word “whitelist” comes from older desktop clients that kept an explicit list of approved addresses you could edit by hand. Gmail does not work that way. Its spam decision is a prediction made fresh on every message, weighing the sender’s reputation, authentication, and how you have treated similar mail before. There is no editable approved-senders screen because the filter is dynamic, not a fixed list.

That sounds like a loss of control, but it is the opposite once you know the levers. You override the prediction in three ways, and each is a real whitelist action even though none is labelled as one. A filter with Never send it to Spam is the hardest of the three — a deterministic rule that beats the guesswork. Contacts is the softest and fastest. Clicking Not spam trains the classifier on a single message. Use the right one for the situation and a wanted sender stops disappearing.

Whitelist With a Filter

The strongest whitelist is a filter. In Gmail, click Show search options, type the sender’s address in the From field, click Create filter, tick Never send it to Spam, and click Create filter again. That rule overrides Gmail’s spam prediction for that address, so their mail always reaches your inbox.

This is the method that actually deserves the name “whitelist”, because Never send it to Spam is a hard override rather than a hint. To build it on the web:

1. Open Show search options. Click the slider icon at the right edge of the search box at the top of Gmail. The search panel drops down.
2. Enter the sender in the From field. Type the exact address, such as receipts@yourstore.com. You can leave every other field blank — From alone is enough to match one sender.
3. Click Create filter. Per Google’s filter guide, this button at the bottom of the panel moves you from defining the match to choosing the action. Nothing is saved yet.
4. Tick Never send it to Spam. In the actions list, this checkbox is the whitelist itself. Optionally also tick “Always mark it as important” so the sender lands in your priority inbox.
5. Click Create filter to save. The rule applies to new mail immediately.

One caveat from Google matters: a filter only affects new messages. Anything already sitting in Spam stays there until you rescue it manually — which is the Not spam step further down. If you want to confirm the filter caught the right address later, a quick search by sender shows you every message it now governs.

Whitelist a Whole Domain

To whitelist every sender at a company, type only the domain in the From field — for example @company.com instead of one full address — then apply Never send it to Spam. The single rule then covers staff who email from many individual addresses, or a service that rotates its sending subaddresses.

A per-address filter is fine for a newsletter or a single contact, but it breaks down when a whole organisation emails you from dozens of addresses. A law firm, a school, a vendor whose support, billing, and account teams all use different mailboxes — whitelisting each one is tedious and you will always miss the next new hire.

The domain filter solves it in one rule. When you reach the From field, type @company.com rather than a person’s address. Gmail matches any sender whose address ends in that domain, so alice@company.com, billing@company.com, and a brand-new bob@company.com are all covered by the same Never send it to Spam rule. Two cautions: only do this for domains you genuinely trust end to end, since you are exempting every possible sender there from spam checks — and never whitelist a public mail domain like @gmail.com or @outlook.com, which would wave through millions of strangers. If you later want to organise that domain’s mail too, pair the filter with a Gmail label in the same rule.

The Contacts Shortcut

Adding a sender to Google Contacts whitelists them without building a filter. Google states that when you add a sender to Google Contacts, Gmail stops sending their messages to spam. It is the fastest single-sender option, though it is a softer signal than a Never send it to Spam filter.

For one person you trust, this is the path of least resistance. Open any message from them, hover over their name or click the three-dot menu, and choose “Add to Contacts”. That is it — no search panel, no actions list. Per Google’s spam guidance, the message says it plainly: adding a sender to Google Contacts stops their mail going to spam.

The trade-off is strength. A Contacts entry is a strong hint to the classifier, but a Never send it to Spam filter is a hard rule. For most personal correspondents the hint is plenty. For a sender that keeps getting flagged despite being in your contacts — often one with shaky domain authentication — layer the filter on top. The two signals together make misrouting extremely unlikely. Contacts also has a side benefit: it makes future messages from that person easier to find and surfaces them in autocomplete when you compose.

Mark Not Spam to Recover Mail

A whitelist filter only governs new mail, so a message already in Spam needs the Not spam button. Open the Spam folder, tick the wrongly-flagged message, and click Not spam. Google states that future emails from that sender then won’t go to Spam — so it both rescues and whitelists in one click.

Building a filter does nothing for the message sitting in Spam right now. That one needs a manual rescue, and the Not spam button does double duty: it moves the message to your inbox and it trains Gmail that the sender is wanted.

On the web, click More in the left menu to reveal the Spam folder, open it, tick the checkbox beside the wrongly-flagged message — or several at once — and click Not spam at the top. The mail jumps to your inbox, and per Google, future emails from that sender won’t go to Spam. That is a lightweight whitelist on its own. For a sender you only ever expect a handful of messages from, Not spam plus a Contacts entry is usually enough; reserve the full filter for senders you cannot afford to miss. The opposite action is just as quick when something slips through the other way — reporting spam trains the filter in the other direction.

Why a Whitelisted Sender Still Slips

Whitelisting is not absolute. A filter ignores mail already in Spam; a previously blocked sender keeps getting flagged even after you whitelist them; and a Workspace admin policy can override personal settings on a work account. Stacking a filter, a Contacts entry, and a Not spam click resolves nearly every case.

Even a correctly built whitelist has honest failure modes. Knowing them saves you from concluding the feature is broken when it is working as designed:

• The filter only touches new mail. Anything Gmail flagged before you saved the rule stays in Spam. Clear it once with Not spam, then the filter handles everything afterward.
• You blocked the sender earlier. Google notes that once you block a sender, their mail keeps getting identified as spam even after you remove it from the folder. Unblock them in Settings before the whitelist can work.
• A work account has an admin policy. On a Google Workspace account, an administrator can set spam rules that sit above your personal filters. If a sender keeps getting caught on a work address despite your filter, the policy is the likely cause — ask your admin.
• Authentication is genuinely failing. If the sender’s domain has broken SPF, DKIM, or DMARC records, Gmail distrusts the mail for good reason. A Never send it to Spam filter still forces it through, but the underlying problem is on the sender’s side.

When in doubt, stack the signals: a filter, a Contacts entry, and one Not spam click cover the legitimate cases between them. If a sender still cannot get through after all three, the issue is almost always a block you forgot or an admin policy you cannot see.

Removing a Sender From the Whitelist

To un-whitelist a sender, delete the filter that protects them. Open Settings, go to the Filters and Blocked Addresses tab, find the Never send it to Spam rule for that address, and delete it. If you also added them to Contacts, remove the contact so no signal remains.

Whitelists should not be permanent. A newsletter you once wanted, a vendor you stopped working with, a sender who started abusing the pass — all are reasons to undo it. The cleanup is the mirror image of setup.

Open Settings (the gear icon, then “See all settings”), go to the Filters and Blocked Addresses tab, and you will see every filter you have built listed in full. Find the one with Never send it to Spam for the address in question, click delete, and confirm. The rule is gone and Gmail’s normal spam prediction takes over again for that sender. If you also added them to Google Contacts, open Contacts and remove the entry, since that signal would otherwise keep nudging their mail to the inbox. With both removed, the sender is back to being judged on its own merits — which, for a sender that turned into noise, is exactly what you want. The same tab is also worth a periodic filter audit: stale whitelist rules quietly let mail through long after you stopped caring about it.

Verdict

There is no whitelist button in Gmail — you build one from a filter with Never send it to Spam, an entry in Google Contacts, and the Not spam button. The filter is the hard rule, Contacts the fast shortcut, Not spam the rescue. Stack all three for a sender you truly cannot miss.

Best for: anyone losing real mail to the spam folder — a client’s replies, receipts, a paid newsletter, a recruiter. The filter method gives you a deterministic safe sender list one address or one domain at a time, and it survives Gmail’s ever-changing predictions because Never send it to Spam is an override, not a hint.

Skip if: you only need to rescue a single message once. For that, the Not spam button alone is faster than building a filter — and it quietly whitelists the sender for next time as a bonus.

Start with the filter for senders you cannot afford to miss, use Contacts for the quick everyday cases, and reach for Not spam whenever something legitimate has already been caught. Keep the Filters tab tidy so old whitelist rules do not outlive their purpose, and your real correspondents stop vanishing into spam.

Alexis Dollé

Founder & Editor

Alexis Dollé, email expert for 10+ years. Founder of Email Tools. I test every email client and utility myself, then write about them the way I’d explain them to a friend — no marketing fluff, no sponsored rankings, every claim sourced.

LinkedIn

Related: How to create a filter in Gmail — the full filter mechanics behind a whitelist rule. Gmail: mark an email as not spam — rescue mail already caught. Gmail priority inbox setup — make whitelisted senders stand out.