Cold email DNS authentication: a pre-launch checklist
Launch every Google Workspace sending domain with SPF, DKIM, DMARC, MX, and a fully tested message path.
Expert insights, best practices, and actionable strategies to master cold email outreach and maximize your inbox deliverability.
Launch every Google Workspace sending domain with SPF, DKIM, DMARC, MX, and a fully tested message path.
Use warmup activity, delivery acceptance, provider health, inbox placement, and replies to scale outbound with confidence.
Launch client domains, mailbox batches, authentication, sequencer connections, warmup, monitoring, and reply workflows from one repeatable system.
Email deliverability is the foundation of successful cold email campaigns. In 2025, with increasingly sophisticated spam filters and stricter authentication requirements, understanding deliverability has become more critical than ever. This comprehensive guide covers everything from basic DNS setup to advanced reputation management strategies used by high-volume teams sending millions of emails monthly.
Achieving 40% reply rates in cold email isn't about luck—it's about understanding human psychology, crafting compelling narratives, and delivering genuine value. While the average cold email sees 1-3% reply rates, top performers consistently achieve 20-40% through systematic approaches to personalization, messaging, and follow-up strategies.
Choosing the right email provider for cold email campaigns is a critical decision that impacts deliverability, scalability, and overall campaign success. Google Workspace and Microsoft 365 are the two dominant players in the enterprise email space, each offering different strengths for outbound sales teams.
Cold email templates are the foundation of successful outbound campaigns, but not all templates are created equal. The difference between a 2% reply rate and a 20% reply rate often comes down to the quality and relevance of your email templates.
Scaling cold email operations from 100 to 10,000 emails per day is one of the most challenging transitions for outbound sales teams. While the principles of successful cold email remain the same, the infrastructure, processes, and strategies required change dramatically at scale.
Understanding why people respond to cold emails is fundamental to creating effective campaigns. While technical factors like deliverability and timing matter, human psychology drives email responses more than any other factor. Successful cold email campaigns tap into fundamental psychological principles that influence human decision-making and behavior.
Cold email compliance is more critical than ever in 2025, with increasingly strict regulations and growing consumer privacy concerns. Understanding legal requirements and implementing proper compliance practices is essential for protecting your business, maintaining deliverability, and building trust with prospects.
The AI SDR category went from a handful of early bets in 2023 to a crowded, well-funded market by 2026. Artisan, 11x, Instantly, Clay, Apollo, and a wave of newer entrants are all competing for the same budget line: the sales development function.
An AI SDR (Artificial Intelligence Sales Development Representative) is software that autonomously performs the outbound prospecting and outreach functions traditionally handled by a human sales development rep.
Artisan Ava is an AI sales development representative (SDR) built by Artisan AI. It's one of the most well-known products in the AI SDR category, having raised significant venture funding and generated substantial press coverage since its launch.
This guide is about replacing the SDR function — the top-of-funnel prospecting and outreach workflow — not necessarily individual people. The distinction matters.
This question gets more concrete every quarter. In 2023 it was theoretical. In 2024, early AI SDR tools started delivering enough results to take seriously. In 2026, multiple products now handle the full outbound loop — ICP research, prospect discovery, personalized email, follow-up, reply handling, meeting booking — at meaningful scale.
The best Google Workspace mailboxes for cold email are official, paid Workspace seats on dedicated sending domains that you control, with SPF, DKIM, and DMARC set correctly before the first send.
Before you buy Google Workspace mailboxes for cold email, decide three numbers first: your daily send target, a safe per mailbox volume, and how many mailboxes each domain will carry.
Instantly runs your campaigns, but it is not the thing Gmail or Outlook judges. The inbox judges the mailbox: its domain, its authentication, its history, and what it sends.
The right mailboxes for Smartlead are official Google Workspace accounts on domains dedicated to outbound, grouped so each client or brand has its own domains.
Cold emails go to spam for five main reasons, and you should check them in this order: authentication is missing or failing, the sending domain is new or overloaded, each mailbox is sending too much too fast, the list is bouncing or full of people who never engage, and the content looks like bulk mail.
A cold email domain burns when mailbox providers learn to distrust it, so more of its mail goes to spam no matter what you send. It usually happens for four reasons: too much volume per mailbox or per domain, lists that bounce or reach the wrong people, complaints and negative engagement building up, and setup gaps.
If a Google Workspace mailbox gets suspended or blocked after cold email, first work out which kind it is. A temporary sending limit usually lifts on its own within about 24 hours. A user suspension by Google for suspected abuse needs an admin to review it and request a review if appropriate.
To authenticate a cold email domain on Google Workspace you need four DNS records: MX pointing to Google, one SPF TXT record that includes Google, a DKIM TXT record generated in the Admin console and then switched on, and a DMARC TXT record.
Most cold email teams run two or three mailboxes per domain, and many go no higher than about five. The reason is risk concentration: every mailbox on a domain shares that domain's reputation.
Primary domain isolation means your company's main domain never sends cold email. Instead, outbound runs on separate dedicated domains with their own mailboxes and authentication.
ColdMail and Mailpool both handle cold email infrastructure, but take different approaches. One standardises on Google Workspace with dedicated domains, the other offers multiple mailbox types in one tool.
Both Google Workspace and Microsoft 365 can carry cold email when set up right. The choice depends on your recipients, sequencer compatibility, and which platform your team can run reliably.
Shared cold email infrastructure is cheaper to start. Dedicated Google Workspace on your own domains gives isolation and control. What each one trades, and when to use which.
Instantly runs campaigns. The infrastructure under it decides trust. What the mailbox layer includes, your options for sourcing it, who should own each part, and how to tell when it is the problem.
How to buy cold email mailboxes on official Google Workspace and dedicated domains, what shared SMTP actually risks, and the checklist to run before you pay.
A burned cold email inbox is not always a burned domain. Volume, lists, complaints, shared pools, and missing auth each leave different marks. How to tell which, and what to fix before you buy another seat.
When Gmail puts cold email in spam, fix authentication, list quality, volume, and complaints before you rewrite every subject line. A practical order for Workspace senders.
Google publishes per user sending limits on Workspace. Those ceilings are not your cold email target. What the limits are, what happens when you hit them, and the caps operators actually use.
Rotation spreads cold email across mailboxes and domains so one seat never carries the day. How to set it up under your sequencer, what to watch, and mistakes that undo the benefit.
Searching Mailforge alternatives? Use a mechanism checklist for cold email infrastructure: platform, domains, admin access, DNS, isolation, and sequencer handoff. No invented scores.
At minimum the purchase should cover:
**Brand isolation.** Cold email never runs on the client's primary company domain or on your agency primary domain. Dedicated outbound domains sit close to each brand and redirect to the main site. See [Primary Domain Isolation for Cold Email](/blog/primary-domain-isolation-cold-email).
**Send limit hit.** Google publishes per user daily sending limits on paid Workspace ([sending limits page](https://support.google.com/a/answer/166852)). Hitting a limit can block new sends for up to 24 hours. That is temporary and documented. It is not a policy suspension, but it is a sign your sequencer caps were wrong.
Before you rebuild:
Each outbound domain is its own mail domain. It does not inherit MX from your primary company domain. If `brandmail.com` is the cold domain, `brandmail.com` needs MX that points to Google Workspace for that domain. Leaving registrar parking MX in place, or pointing at an old host, is one of the most common setup failures.
Speaking in category terms, not as a scraped feature list:
The systems view of Google Workspace outbound infrastructure: dedicated domains, Workspace seats, authentication, density, warmup, sequencer handoff, and health monitoring.
How Instantly and Google Workspace fit together for cold email: sequencer above, dedicated Workspace mailboxes and auth below, with a clean handoff and sane caps.
Warmup helps new mailboxes build history. It does not fix dirty lists, missing authentication, or reckless daily caps. The myths that waste weeks, and what to do instead.
Buying new cold email domains feels like progress. When the list, density, copy, or shared pool stays the same, the new batch burns the same way. When a batch helps, and when to stop.
How SPF, DKIM, DMARC, and MX work together for cold email on Google Workspace, what Google expects, how to verify, and which mistakes break placement before copy matters.
Smartlead runs campaigns and rotation. Under it you still need dedicated domains, authenticated Google Workspace mailboxes, warmup, and admin control. What the infrastructure layer covers.
How to set up dedicated domains and Google Workspace mailboxes under Smartlead: isolation, authentication, density, connect methods, and what the sequencer does not replace.
What AI SDR and headless outbound stacks still need from mailbox infrastructure: official Google Workspace on dedicated domains, auth, density, and a provision path that stays under admin control.
Open and click tracking can distort cold email metrics and add filter signals. The tradeoffs, when operators disable opens, and what to measure instead.
Outbound mailbox density is how many seats you put on one dedicated domain. Why two or three is common practice, why packing fails, and how density works with rotation and caps.
How n8n fits beside Google Workspace mailbox infrastructure and sequencers like Instantly or Smartlead: orchestration, not sending replacement, with auth and density still required.
How to shortlist Google Workspace focused providers for outbound email using control axes: official seats, domain ownership, admin access, auth, isolation, and sequencer handoff. No invented scores.
A cold email domain is ready to send when it is registered to you, separate from your primary domain, forwarding to your main website, verified in Google Workspace, and passing SPF, DKIM, and DMARC with MX pointing to Google. On top of that it needs a small number of mailboxes with complete profiles, a few weeks of warmup, and a clean handoff to your sequencer. Skip a step and the domain usually still sends; it just sends worse, and you find out weeks later.
Cold email infrastructure providers sell the layer under your sequencer: dedicated domains, mailboxes, DNS authentication, warmup, and health monitoring. They do not all sell the same thing. Some provision official Google Workspace on domains you control. Some offer Google, Microsoft, and shared options in one product. Some run private SMTP. Some sit closer to sequencers that also sell mailboxes. Comparing them by logo or by price alone is how teams can end up with the wrong layer and a quiet reply rate drop a few weeks later.
Cold email mailbox providers all promise inboxes that are ready to send. What they actually sell varies a lot: some resell seats inside a shared tenant, some use licence types that were never meant for outbound, some run their own SMTP servers, and some provision official Google Workspace on domains dedicated to you. The label on the pricing page rarely tells you which one you are buying.
When a cold email reply rate drops, the cause is usually one of three things: what you sent changed (list, offer, or copy), where it landed changed (placement), or how much you sent changed (volume per mailbox or per domain). Before you buy a new batch of domains, work out which one it is. Check recent list and copy changes, bounce rate, authentication, blacklists, sending volume, tracking settings, and mailbox connection health, in that order. The cheapest checks come first, so start at the top.
You can absolutely buy Google Workspace yourself and run cold email on it. Plenty of teams do. The real question is not whether DIY works, but how many domains you plan to run and who will do the same admin work on each one, every time, without a slip. At two domains, DIY is often the right call. At twenty domains across several brands or clients, the repeated setup and the ongoing checks are where time and mistakes pile up.
Google Workspace fits cold email when you are sending personal, one to one style B2B outreach at modest volume per mailbox, from dedicated domains that are separate from your primary company domain, through a sequencer such as Instantly or Smartlead. It does not fit when you want to blast a large list from a few accounts, send opt in newsletters, or run transactional mail. The platform is the same one your customers use for their own inbox; the question is whether your sending pattern looks like a person or like a bulk system.
Most cold email teams keep each warmed Google Workspace mailbox in the range of **roughly 20 to 40 cold sends per day**, including follow ups, and start lower while a mailbox is new. That is common operator practice, not a rule from Google. Google's own per user limit is far higher, but it is a ceiling on what the account may send. It tells you when Google will stop you, not how much you can send while staying welcome in the inbox.
To warm up a Google Workspace mailbox for cold email, finish the foundations first (dedicated domain, MX, SPF, DKIM, and DMARC passing, complete profile, 2FA), then connect the mailbox to one warmup tool, let it build activity for a few weeks, and only then add campaign volume slowly. Warmup gives a new mailbox a history of normal conversation before it starts sending to strangers. It does not fix a bad list, heavy volume, or broken authentication, and a healthy warmup dashboard is not proof that campaigns will land.
Mailbox infrastructure for Smartlead is everything underneath your campaigns: the sending domains, the mailbox platform, the DNS records, warmup, health monitoring, and the credentials Smartlead uses to send. Smartlead handles sequencing, rotation, and replies. The infrastructure decides whether each email is trusted when it lands. You need both, and they do not have to come from the same vendor.
Open rate is one of the first numbers every sequencer shows, so it becomes the number teams steer by. For cold email, that is a mistake. Opens are recorded by a tiny image loading, and plenty of things load images without a person ever reading the email. Some opens are not people. Some people never trigger an open. And the tracking needed to count opens adds elements to every email that a receiving server may weigh.
For an agency, scalable cold email infrastructure does not mean more emails from the same mailboxes. It means you can add a client, pause a client, or lose a client with little or no effect on the others. The way to get there is isolation: each client gets its own dedicated domains, its own official Google Workspace mailboxes, and its own admin boundary, all sized from that client's daily target.
The difference between shared SMTP and Google Workspace for cold email is who your mail is judged alongside. On shared SMTP, your messages leave from mail servers and IP addresses that other senders also use, so part of your reputation is borrowed from people you have never met. On Google Workspace with dedicated domains, your mail travels through Google's infrastructure from accounts in an organization you control, and the reputation that matters most is the one your own domains build. Shared SMTP is usually cheaper and faster to start. Workspace gives you a platform receivers already know and control you can actually use.
A practical comparison of the top mailbox providers for cold outreach, updated for 2026 and focused on Gmail/Google Workspace deliverability, setup speed, admin control, and risk.
Get the latest cold email insights delivered to your inbox weekly.