You don't find out a Microsoft 365 inbox is unhealthy when you check it — you find out when a campaign tanks and you're left guessing why. A health check flips that: a repeatable audit that tells you the state of your inboxes before problems cost you a campaign. Think of it like a pre-flight checklist — a few specific checks that confirm each inbox is authenticated, reputable, and ready to send. This guide walks through a Microsoft 365 inbox health check step by step: what to check, what healthy looks like, what each warning sign means, and when a result says stop sending until you fix it.
Why Run a Health Check
A quick case for the habit before the procedure. A health check catches problems while they're fixable, instead of discovering them through failed campaigns.
Inbox problems — authentication breaking, reputation slipping, a blacklisting — often develop silently. Your campaigns keep sending, but deliverability quietly drops, and you don't notice until results crater. A periodic health check surfaces these issues directly, so you fix a slipping inbox before it wastes a campaign's worth of sends. It's the difference between managing your inboxes and hoping they're fine.
💡 Check before you send, not after you fail
The whole value of a health check is timing — it tells you an inbox is unhealthy before you send a campaign through it, not after the campaign flopped. Run it on new inboxes before their first send, and on active inboxes periodically. Ten minutes of checking prevents sending an entire campaign from a broken inbox. Treat it like a pre-flight check: quick, routine, and done before every takeoff that matters.
Here's the check itself, step by step.
The Health Check, Step by Step
Run these checks on any Microsoft 365 cold email inbox. Each takes a couple of minutes, and together they give a complete health picture.
Authentication check. Send a test email to a Gmail you control, open Show original, and confirm SPF, DKIM, and DMARC all PASS. Any FAIL means stop and fix.
Reputation check. Look at Google Postmaster Tools for the sending domain — healthy is Good or High.
Blacklist check. Run the domain and IP through a blacklist lookup tool to confirm they're not listed.
Deliverability score. Send to mail-tester.com for a score — 9 or 10 out of 10 confirms clean configuration.
Bounce and complaint review. Check recent bounce rate (under 2%) and complaint rate (under 0.1%).
Work through them in order. The authentication check comes first because a failure there makes everything else moot — a broken SPF or DKIM sends you to spam regardless of reputation. For the SPF specifics on Microsoft, see our Microsoft 365 SPF guide.
Reading the Results
Knowing what to check is half of it — knowing what the results mean is the other half. Here's how to read each outcome.
Check | Healthy | Warning |
|---|---|---|
SPF/DKIM/DMARC | All PASS | Any FAIL — stop |
Postmaster reputation | Good or High | Medium, Low, or Unknown |
Blacklist status | Not listed | Listed anywhere |
Mail-tester score | 9 to 10 | Below 8 |
Bounce / complaint | Under 2% / 0.1% | Above thresholds |
A green across the board means the inbox is healthy and safe to send. Any red is a signal to pause and investigate before sending. The most urgent reds are authentication failures and blacklistings — those actively block delivery. A Medium reputation is a softer warning: not broken, but ease off and let it recover before pushing volume. For the metrics context, see our inbox health metrics guide.
When the Check Says Stop
The point of a health check is acting on what it finds — and sometimes that means not sending. Here's when a result should stop you, and what to do.
Stop sending if authentication fails (fix the DNS record before anything else), if the inbox or IP is blacklisted (address the listing and its cause), or if Postmaster shows Unknown on an inbox you believed was warmed (it may not actually be ready). Sending through any of these wastes the campaign and can deepen the damage.
🚩 Don't send through a failed check to hit a deadline
The costly mistake is running the health check, seeing a red flag, and sending anyway because a campaign is scheduled. A failed authentication check or a blacklisting means the campaign will underperform badly and can worsen the inbox's state. Fix the red flag first, even if it delays the send. A campaign sent through a broken inbox is worse than a campaign sent a day late. Respect what the check tells you.
For fixing a bounce problem the check surfaces, see our bounce rate fix guide.
Starting From a Clean Bill of Health
Here's the reframe. The health check is essential ongoing, but it's most useful when it's confirming health rather than uncovering problems — and that depends on how the inboxes started.
Inboxes that begin healthy — properly warmed, authenticated, on dedicated IPs — pass health checks consistently, so your checks become quick confirmations rather than problem hunts. Inboxes that started weak (fresh, misconfigured, shared-IP) fail checks often, turning every audit into troubleshooting. A clean starting point makes the whole health-check habit lighter.
So the ongoing health check and the starting quality work together: start with healthy inboxes, and the checks mostly return green, flagging only the occasional real issue. Start with weak inboxes, and you're constantly finding problems the checks can't fix — only surface.
Litemail pre-warmed Microsoft 365 inboxes start with a clean bill of health: genuine warm-up history (verified Good or High Postmaster reputation within 48 hours), SPF/DKIM/DMARC pre-configured (authentication passes), dedicated US and EU IPs (clean blacklist status), and full admin access from $4.99/inbox — so your health checks confirm health rather than uncover problems. For the wider management routine, see our inbox management guide.
Inboxes that start with a clean bill of health. Litemail pre-warmed Microsoft 365 inboxes arrive with genuine warm-up verified Good or High in Postmaster, SPF/DKIM/DMARC pre-configured, dedicated US and EU IPs, and clean blacklist status — so your health checks confirm health rather than uncover problems, from $4.99/inbox. Full admin access included. Get Pre-Warmed Inboxes from $4.99 →
About Litemail — Litemail provides pre-warmed Google Workspace and Microsoft 365 inboxes for cold email outreach. From $4.99/inbox with automated DNS, dedicated US and EU IPs, and full admin access. View pre-warmed inbox plans →
Related reading: Inbox Health Metrics · Microsoft 365 SPF Fix · Bounce Rate Fix · Inbox Management Guide · Blacklist Check Tools · Litemail Pre-Warmed Inboxes — Plans and Pricing
The Bottom Line
A health check tells you an inbox is unhealthy before you send, not after a campaign flops — run it like a pre-flight check.
The five checks: authentication PASS, Postmaster Good/High, not blacklisted, mail-tester 9 to 10, bounce under 2% and complaints under 0.1%.
Run authentication first — a SPF or DKIM failure sends you to spam regardless of everything else.
Green across the board means safe to send; any red means pause and investigate first.
Stop sending on authentication failures, blacklistings, or Unknown reputation on a supposedly warmed inbox — fix before sending.
Inboxes that start healthy pass checks consistently, so the habit becomes quick confirmation rather than constant troubleshooting.
Frequently Asked Questions
How do I run a Microsoft 365 inbox health check?
Run five checks: send a test to a Gmail and confirm SPF, DKIM, and DMARC all PASS via Show original; check Google Postmaster shows Good or High reputation; run the domain and IP through a blacklist lookup; send to mail-tester.com for a 9 or 10 score; and review recent bounce rate (under 2%) and complaint rate (under 0.1%). Do the authentication check first — a failure there makes everything else moot.
Why should I health-check inboxes before sending?
Because inbox problems develop silently — authentication breaks, reputation slips, a blacklisting appears — while campaigns keep sending and deliverability quietly drops. You don't notice until results crater. A health check surfaces these directly, so you fix a slipping inbox before it wastes a campaign's worth of sends. Run it on new inboxes before their first send and on active inboxes periodically, like a pre-flight check before every takeoff that matters.
What does a healthy Microsoft 365 inbox look like?
All authentication passing (SPF, DKIM, DMARC), Postmaster reputation showing Good or High, not listed on any blacklist, a mail-tester score of 9 or 10, and bounce rate under 2% with complaints under 0.1%. Green across all five means the inbox is healthy and safe to send. Any red — especially authentication failures or blacklistings, which actively block delivery — is a signal to pause and investigate before sending.
When should a health check stop me from sending?
Stop if authentication fails (fix the DNS record first), if the inbox or IP is blacklisted (address the listing and its cause), or if Postmaster shows Unknown on an inbox you believed was warmed. Sending through any of these wastes the campaign and can deepen the damage. Don't send through a failed check just to hit a scheduled deadline — a campaign sent through a broken inbox is worse than one sent a day late.
How often should I health-check my inboxes?
Always before a new inbox's first send, and periodically on active inboxes — weekly is reasonable for ongoing campaigns. The full check takes about ten minutes and catches problems while they're fixable. Inboxes that started healthy (properly warmed, authenticated, on dedicated IPs) pass consistently, so periodic checks become quick confirmations rather than problem hunts, keeping the habit light.
How does Litemail help with inbox health?
Litemail pre-warmed Microsoft 365 inboxes start with a clean bill of health: genuine warm-up history (verified Good or High Postmaster reputation within 48 hours), SPF/DKIM/DMARC pre-configured (authentication passes), dedicated US and EU IPs (clean blacklist status), and full admin access from $4.99/inbox. Because they begin healthy, your health checks confirm health rather than uncover problems — turning the audit into quick confirmation instead of constant troubleshooting.
Buy Pre-Warmed Email Inboxes & Domains | Litemail
Buy pre-warmed email accounts, inboxes and domains from $4.99/inbox. Google Workspace & Microsoft 365. Clean bill of health, dedicated IPs, DNS done, setup in 5 minutes.
No minimum order · Starts healthy · US and EU IPs
Related reading: Inbox Health Metrics · Microsoft 365 SPF Fix · Bounce Rate Fix · Inbox Management Guide · Litemail Pre-Warmed Inboxes — Plans and Pricing
