How and Why to Whitelist a Domain in Gmail?

Last updated: September 2026

Google now uses terms such as allowlist and approved senders, but many admins still search for “whitelist a domain in Gmail.” This guide covers both the organization-wide Google Workspace method and the individual Gmail filter method.

What Does It Mean to Whitelist a Domain in Gmail?

When people talk about “whitelisting” a domain in Gmail, they usually mean telling Gmail that messages from a particular sender or domain should be treated as trusted.

For Google Workspace admins, however, there are different ways to do this.

An Approved senders list can contain individual email addresses or entire domains. Messages from approved senders can bypass Gmail’s spam filters.

Google’s email allowlist, on the other hand, is designed around sender IP addresses rather than domain names. This distinction is important when deciding which control to use.

Before you add a domain

Allowlisting should not be the first response every time a legitimate email lands in Spam.

First, determine why Gmail classified the message as spam. If the sender has authentication or configuration problems, those should be corrected rather than relying on a permanent exception.

This becomes particularly important when considering an entire domain. A broad exception can allow more messages to bypass Gmail’s normal spam protections.

How to Whitelist a Domain in Google Workspace

If you manage Gmail for an organization, use the Google Admin console rather than asking every user to create their own Gmail filter.

Step 1: Open Gmail settings in the Google Admin console

Sign in to your Google Admin console using an administrator account.

Go to:

Apps → Google Workspace → Gmail → Spam, Phishing, and Malware

Step 2: Find the Spam settings

In the Gmail settings, locate the Spam section.

This is where admins can configure how Gmail handles spam and create exceptions for trusted senders.

Step 3: Create or select an approved senders list

Within the spam configuration, use an address list to specify the senders you want Gmail to treat differently.

You can create an address list containing individual email addresses or an entire domain. Google specifically recommends Approved senders for this use case rather than entering a domain in the IP-based email allowlist.

Step 4: Add the trusted domain

Add the domain or sender that your organization trusts to the address list.

Be selective here. If only one service or sender needs the exception, consider adding the specific sender rather than trusting an entire domain.

Step 5: Apply and save the configuration

Review the organizational unit where the setting is being applied and save your changes.

This gives admins centralized control rather than relying on users to maintain their own Gmail filters.

Admin tip: Keep approved sender lists as narrow as possible. If only notifications@example.com needs an exception, there may be no reason to approve every sender using example.com.

Email Allowlist vs. Approved Senders: What Is the Difference?

The names can be confusing because Google’s email allowlist is not where you enter a domain.

Setting	Best used for
Approved senders	Trusted email addresses or entire domains
Email allowlist	Trusted source IP addresses
Gmail user filter	Preventing a sender from going to Spam for one mailbox

If you’re trying to whitelist example.com across your Google Workspace environment, Approved senders is generally the relevant option.

If you need to trust mail coming from specific infrastructure or a gateway, the IP-based email allowlist may be more appropriate.

How Individual Gmail Users Can Keep a Sender Out of Spam

Sometimes you don’t need an organization-wide rule.

Individual Gmail users can create a filter that tells Gmail never to send messages matching specific criteria to Spam. Google still documents this process for Gmail users.

Step 1: Open Gmail’s search options

Open Gmail on a computer.

Click Show search options on the right side of the Gmail search bar.

Step 2: Enter the sender

In the From field, enter the email address you trust.

Then click Create filter.

Step 3: Select “Never send it to Spam”

Gmail will display the available filter actions.

Select: Never send it to Spam. Then click Create filter.

That’s it. Gmail will apply the filter to messages that match the criteria.

Should Google Admins Whitelist an Entire Domain?

Only when there is a clear business reason.

Allowlisting can solve legitimate delivery problems, but every exception changes how Gmail’s protections are applied. The broader the exception, the more carefully it should be reviewed.

Before approving an entire domain, ask:

• – Is the whole domain trusted, or only one sender?
• – Why are these messages currently being classified as spam?
• – Is the sender properly authenticated?
• – Can a specific address be approved instead?
• – Does the exception still need to exist?

For Google Workspace environments, approved sender lists should be treated as a security configuration, not simply as an inbox convenience.

What If Legitimate Emails Are Already Going to Spam?

For an individual mailbox, users can open Spam, select the legitimate message, and click Not spam. Google states that future messages from that sender should then stop going to Spam. Adding the sender to Google Contacts or creating a filter are also documented options.

For repeated problems across multiple users, admins should investigate the sender and Gmail configuration before applying an organization-wide exception.

Manage Gmail Security Beyond Allowlisting

Allowlisting is only one part of managing email security in Google Workspace.

Admins also need visibility into email activity, suspicious behavior, external communications, and changes that could indicate compromised accounts.

With GAT+, Google Workspace admins can audit Gmail activity alongside the rest of their Workspace environment, giving security teams additional context when investigating suspicious activity or reviewing how users communicate with external parties.

How Google Workspace Accounts Get Compromised: The Modern Phishing Attack Chain

FAQ

Can I whitelist an entire domain in Gmail?

Google Workspace admins can add an entire domain to an approved senders address list. This differs from Google’s email allowlist, which uses source IP addresses.

Can individual Gmail users whitelist a domain?

Individual users can create Gmail filters to control how matching messages are handled. Google’s documented method for preventing legitimate mail from reaching Spam uses the sender’s email address and the Never send it to Spam filter option.

Where is the whitelist setting in Google Admin?

For trusted domains and senders, admins should look at Gmail’s spam configuration and approved sender/address list options. The email allowlist is intended for IP addresses, so it is not the correct field when you simply want to enter a domain.

Is it safe to whitelist a domain?

It depends on the domain and why the exception is required. Admins should avoid broad exceptions when a specific sender is sufficient and investigate why Gmail is filtering legitimate mail before bypassing spam controls.