Technical explainer · 4 min read

What is a List-Unsubscribe header?

Every legitimate marketing email contains a hidden technical signal that makes automatic unsubscribing possible. Here's what it is, how it works, and why Gmail uses it — and how Inboxed uses it to clean your entire inbox at once.


What it is

The List-Unsubscribe header is a piece of metadata attached to every marketing and newsletter email. It's invisible to the reader — it lives in the email's technical header, not the body — but email clients like Gmail and Apple Mail can read it.

It was standardized in RFC 2369 (1998) and extended in RFC 8058 (2017) with the one-click variant. Every major email service provider — Mailchimp, SendGrid, Klaviyo, Constant Contact — is required to include it in every bulk send.

What it contains

The header contains one or both of the following:

An HTTP URL: a web address where an opt-out request can be sent automatically. The newer RFC 8058 standard defines "List-Unsubscribe-Post" alongside this, which allows a one-click POST request — no redirect, no landing page, no confirmation required.

A mailto address: an email address where an unsubscribe request can be sent. Less immediate than HTTP, but widely supported.

A typical List-Unsubscribe header looks like this:

List-Unsubscribe: <https://sender.com/unsubscribe?id=abc123>, <mailto:unsub@sender.com>

How Gmail uses it

Gmail's built-in "Unsubscribe" button — the one that appears next to the sender name at the top of marketing emails — reads the List-Unsubscribe header and uses it to send the opt-out request on your behalf.

When you click it, Gmail either sends an HTTP POST to the unsubscribe URL or sends an email to the mailto address. You don't visit any website. The opt-out is sent directly.

The limitation: Gmail's button works for one email at a time. It doesn't batch across your entire inbox.

How Inboxed uses it

Inboxed reads the List-Unsubscribe headers across all emails in your inbox — up to 500 recent messages — and builds a deduplicated list of every sender. One entry per domain, not one per email.

When you choose to unsubscribe, Inboxed sends opt-out requests to all senders simultaneously using the same mechanism Gmail uses for its one-click button. The legal weight is identical: under GDPR and CAN-SPAM, senders must process the request within 10 business days.

The key difference from Gmail: Inboxed does this for every sender at once, not one at a time.

Why this matters legally

Because the List-Unsubscribe mechanism is standardized and legally recognized, opt-out requests sent through it carry full legal force under GDPR Article 21 and CAN-SPAM Section 5. Senders who continue sending marketing emails after receiving an opt-out are in violation of the law.

This is why Inboxed calls it a "legally binding opt-out" — not a polite request, but a formal signal that the sender is legally required to act on.

Related articles
How Inboxed uses List-Unsubscribe to clean your inboxHow it worksWhy your inbox is full of newsletters you never asked forInbox tipsHow to stop spam emails for goodInbox tipsFAQ — common questions about InboxedFAQ

See it in action

Inboxed finds every List-Unsubscribe header in your inbox and uses them all at once.

Scan my inbox for free →