Setting up a new domain for cold email correctly takes 45–90 minutes of configuration work plus a 4–6 week warmup period before the first campaign send. Skipping any configuration step produces silent authentication failures that tank deliverability without any visible error. Rushing the warmup produces Medium Postmaster reputation that delivers 22–31% open rates instead of 38–47%. This guide covers every step in the correct order — from domain registration to first campaign send — with the verification checkpoints that confirm each step is done right before moving to the next.
New Domain Cold Email — Complete Step List
Step | Task | Time | Verification |
|---|---|---|---|
1 | Register sending domain | 10 min | Domain live in DNS (~10–15 min propagation) |
2 | Create Google Workspace or MS365 inbox | 15 min | Can log in and send test email |
3 | Configure SPF | 5 min | mxtoolbox.com SPF Lookup shows Pass |
4 | Configure DKIM | 15 min | mxtoolbox.com DKIM Lookup shows PASS |
5 | Configure DMARC | 5 min | mxtoolbox.com DMARC Lookup shows valid record |
6 | Add to Postmaster Tools (GWS) or SNDS (MS365) | 5 min | Domain/IP registered and showing data |
7 | Connect warmup tool | 5 min | Warmup tool shows inbox Connected |
8 | Run warmup — 4–6 weeks | 4–6 weeks | Postmaster shows Good or High at Day 21+ gate check |
9 | Connect to cold email platform | 3–5 min | Platform shows inbox Active, OAuth connected |
10 | Verify list and launch campaign | 30 min | First week bounce rate under 2%, open rate above 30% |
💡 Skip Steps 2–8 Entirely
Pre-warmed inboxes from Litemail arrive with Steps 2–8 already complete. DNS configured, warmup done, Good Postmaster within 48 hours. $4.99/inbox, 24-hour delivery. Skip straight to Step 9.
Step 1 — Register Your Sending Domain
Register a domain variant of your brand name — not your primary company domain. Using the primary domain for cold email risks blacklist events that affect all company email including client communications.
⚙️Domain Naming
Register variants: getYourbrand.com, tryYourbrand.com, meetYourbrand.com. Avoid category-specific names (YourbrandSales.com) — brand variants are more credible to recipients. Register at Namecheap or Google Domains — both have clean default DNS configurations that work well with GWS and MS365 setup.
⚙️Domain Age — Wait 30 Days Before Campaigns
Microsoft applies additional Junk filtering to domains under 30 days old regardless of warmup quality. Register your sending domain at least 30 days before the intended first campaign send date. At scale, maintain a pipeline of pre-registered domains aged and ready to use. See best cold email domain registrar guide for full registrar comparison.
Steps 3–5 — DNS Configuration (SPF, DKIM, DMARC)
All three DNS records must be configured correctly before warmup starts. A DKIM error discovered at Day 14 restarts the warmup clock from Day 1.
Record | For GWS | For MS365 | Verify Via |
|---|---|---|---|
SPF | v=spf1 include:_spf.google.com -all | v=spf1 include:spf.protection.outlook.com -all | mxtoolbox.com SPF Lookup → Pass |
DKIM | Enable in Google Admin → Workspace → Gmail → Authenticate email. Add TXT record at google._domainkey | Enable in MS365 Defender → DKIM. Add both selector1 and selector2 CNAME records | mxtoolbox.com DKIM Lookup → PASS (for each selector) |
DMARC | v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com — same format for both GWS and MS365 | mxtoolbox.com DMARC Lookup → valid record at p=quarantine | |
After configuring all three, send a test email to a Gmail address you control. In Gmail, click the three dots → Show Original. Confirm SPF: PASS, DKIM: PASS, DMARC: PASS in the headers. Any failure = fix DNS before proceeding. See complete SPF, DKIM, DMARC setup guide.
Step 6 — Add to Postmaster Tools and SNDS
📊Google Postmaster Tools
Go to postmaster.google.com → Add domain → enter your sending domain → verify ownership via TXT record or CNAME. After verification, Postmaster begins tracking domain reputation. Data appears within 5–7 days if warmup sends are reaching Gmail addresses. Check daily throughout warmup. See Google Postmaster Tools setup guide.
📊Microsoft SNDS (MS365 only)
Go to postmaster.live.com → Smart Network Data Services → register your sending IPs. For Litemail pre-warmed MS365 inboxes, dedicated IP addresses are listed in your account on delivery. Confirm Green status before starting warmup sends. Register for JMRP (postmaster.live.com/snds/JMRP.aspx) for individual complaint notifications.
Step 7 — Connect Warmup Tool and Start Warmup
Connect a warmup tool via OAuth (not SMTP). Modern Authentication is required for new GWS and MS365 accounts — SMTP warmup tools are increasingly unreliable with accounts created in 2025–2026.
Phase | Days | Warmup Sends/Day | Gate Check |
|---|---|---|---|
Foundation | 1–14 | 10–25 | Day 14: Postmaster showing data (not Unknown) |
Reputation build | 15–28 | 25–35 | Day 21: Postmaster Good or High required before campaign sends |
Ramp | 29–42 | 20–25 | Day 28: Good Postmaster + bounce rate under 2% on campaign sends |
Full operation | 43+ | 15–20 ongoing | Good or High Postmaster sustained — monitored daily |
Full warmup schedule: Cold Email Inbox Warmup Schedule: Day-by-Day for 60 Days.
Step 9 — Connect to Cold Email Platform
Connect your warmed inbox to your cold email platform via OAuth. Platforms supporting OAuth for GWS and MS365: Instantly, Smartlead, Lemlist, Woodpecker, Apollo, Saleshandy. For all platforms, use the Gmail or Microsoft 365 OAuth connection rather than IMAP/SMTP where both options are available.
After connection: set daily limit to 40–50 in the platform inbox settings. Set send gap to 3–10 minutes random. Enable the platform's built-in warmup at 15–20 sends/day per inbox (Instantly, Smartlead) or continue external warmup tool (Woodpecker, which has no built-in warmup). Configure campaign for business hours in prospect timezone. See Instantly inbox configuration guide or Smartlead inbox guide for platform-specific setup.
Step 10 — Verify List and Launch
✅Pre-Launch Checklist
1. Postmaster shows Good or High — check at postmaster.google.com right before campaign launch. 2. mxtoolbox.com blacklist — clean. 3. mail-tester.com — send campaign template, confirm 9/10 or 10/10. 4. NeverBounce — verify all list segments. 5. Platform inbox shows Active/Connected — not Disconnected.
✅First Week Targets
Open rate above 30% (confirming primary inbox placement). Bounce rate under 2% (confirming list quality). Spam rate under 0.08% in Postmaster (confirming ICP targeting quality). Any metric outside these ranges = pause and investigate before week 2 sends continue.
Most Common New Domain Setup Errors
Error | When Discovered | Consequence | Fix |
|---|---|---|---|
DKIM not enabled in admin console | Day 14 gate check — Postmaster Unknown | Restart warmup clock from Day 1 | Enable DKIM in admin console, add TXT or CNAME records, restart warmup |
Duplicate SPF TXT records | Campaign sends — authentication FAIL | All sends fail DMARC — Junk folder or rejection | Delete duplicate SPF records — only one TXT per domain |
MS365 DKIM using TXT instead of CNAME | Day 1 DKIM check | DKIM FAIL on all sends | Delete TXT records, add CNAME records for selector1 and selector2 |
Warmup tool connecting via SMTP not OAuth | Day 7–14 — warmup tool disconnecting | Warmup sends stop silently — reputation not building | Reconnect warmup tool via Modern Auth (OAuth) |
Sending from domain under 30 days old | Day 1 of campaigns | Microsoft applies additional Junk filtering for first 30 days | Wait until domain is 30 days old before campaign sends — not warmup, but actual cold emails |
The Pre-Warmed Inbox Shortcut
Every step in this guide from Step 2 through Step 8 — inbox creation, SPF, DKIM, DMARC, Postmaster setup, and 4–6 weeks of warmup — is completed for you before delivery when you order from Litemail.
Litemail pre-warmed inboxes arrive with Good or High Postmaster within 48 hours, verified SPF/DKIM/DMARC, dedicated US and EU IPs, and full GWS or MS365 admin access. Skip to Step 9 — connect to your platform via OAuth and launch campaigns from day one of delivery. $4.99/inbox, no minimum order, 24-hour delivery.
The 10-step process in this guide exists to document the self-managed path. For most teams, the pre-warmed inbox at $4.99 is cheaper in total cost (no warmup tool subscription for initial warmup, no 6-week delay, no risk of Day 21 gate check failure) than the self-managed path. See the full comparison: Email Warm-Up vs Pre-Warmed Inboxes 2026.
Ongoing Domain Maintenance After Launch
📅Daily (2 minutes)
postmaster.google.com — domain reputation Good or High. mxtoolbox.com blacklist — clean. Either failing = pause campaign sends from that domain before that day's campaign runs.
📅Weekly (5 minutes)
Per-inbox open rate and bounce rate in platform. SNDS for MS365 inboxes. Warmup tool confirmation 15–20 sends/day still active. OAuth connection status — all inboxes Active.
📅Monthly (15 minutes)
DMARC aggregate report review — any authentication failures or spoofing activity. Domain health assessment — any domain with repeated blacklist events or sustained Medium Postmaster is a retirement candidate. See email warmup monitoring daily checklist.
Frequently Asked Questions
How do I set up a new domain for cold email in 2026?
Ten steps: (1) register a sending domain variant (not primary domain), (2) create GWS or MS365 inbox, (3) configure SPF, (4) configure DKIM, (5) configure DMARC, (6) add to Postmaster Tools and SNDS, (7) connect warmup tool via OAuth, (8) run 4–6 week warmup until Good Postmaster at Day 21 gate check, (9) connect to cold email platform via OAuth with 40–50 daily limit, (10) verify list and launch. Or skip steps 2–8 entirely with a Litemail pre-warmed inbox at $4.99 — delivered in 24 hours with Good Postmaster and all DNS pre-configured.
How long does it take to set up a new cold email domain?
45–90 minutes of configuration work plus 4–6 weeks of warmup before the first campaign send. The warmup wait is the dominant constraint — not the configuration time. The Day 21 gate check (Postmaster must show Good or High before campaign sends start) means missing this check extends the timeline another 7–14 days. Pre-warmed inboxes from Litemail skip the warmup entirely — Good or High Postmaster within 48 hours of order at $4.99/inbox.
What DNS records do I need for cold email on a new domain?
Three records: SPF (prevents domain spoofing, tells receiving servers which IPs are authorised to send), DKIM (cryptographic signature that verifies emails are from your domain — TXT for GWS, CNAME for MS365), and DMARC (policy record that tells receiving servers what to do when SPF or DKIM fails — set at p=quarantine minimum). All three must show PASS on mxtoolbox.com lookups before warmup starts. All three are pre-configured on Litemail pre-warmed inboxes on delivery.
Why is my new domain showing Unknown in Google Postmaster Tools?
Two most common causes: DKIM is not correctly configured (verify DKIM via mxtoolbox.com — any FAIL means warmup sends are not attributed to your domain in Google's systems), or the warmup tool's network doesn't have enough Gmail-addressed sends (Postmaster needs Gmail recipients to show data). Check DKIM first — it's the cause in 60–70% of Unknown Postmaster cases after 14+ days of warmup. If DKIM is broken: fix it and restart the warmup clock from Day 1.
How long should I warm up a new cold email domain before sending campaigns?
Minimum 4 weeks — but 6 weeks is safer, especially for domains under 30 days old or domains where DKIM configuration had any delays. The Day 21 gate check is mandatory: Postmaster must show Good or High before any campaign sends start. If still Medium or Unknown at Day 21, extend warmup and recheck at Day 28. Starting campaigns from Unknown or Medium Postmaster produces 22–31% open rates and accelerates reputation degradation — negating the warmup investment.
What is the most common mistake when setting up a new cold email domain?
DKIM misconfiguration — either not enabling DKIM in the admin console, or for MS365, adding DKIM as TXT records instead of CNAME records. Both result in DKIM FAIL on every send. DKIM failure causes DMARC failure. The inbox warms up for weeks while authentication fails silently, producing Unknown Postmaster at every gate check. Fix: verify DKIM via mxtoolbox.com before starting warmup — any FAIL must be resolved before warmup day one.
Can I send cold email from a brand new domain?
Not immediately — new domains require 4–6 weeks of warmup to build Good Postmaster reputation before campaign sends. Microsoft also applies additional Junk filtering to domains under 30 days old. Register sending domains at least 30 days before intended campaign start. The alternative: Litemail pre-warmed inboxes arrive with Good Postmaster and the warmup history already built — campaign-ready in 24 hours from order at $4.99/inbox.
How many sending domains do I need for cold email?
One domain per 3–4 inboxes. For 500 emails per day: 10–17 inboxes across 3–5 domains. Never concentrate more than 4 inboxes per domain — a blacklist event on a domain removes all inboxes on that domain from rotation simultaneously. See buying pre-warmed domains for cold email and cold email domain setup risks at scale.
Skip the 10-Step Setup — Pre-Warmed Inboxes from $4.99
Litemail pre-warmed inboxes complete Steps 2–8 before delivery. Good or High Postmaster within 48 hours. SPF, DKIM, DMARC pre-configured and verified. Dedicated US and EU IPs. Full admin access. Connect to any platform via OAuth in 3 minutes. $4.99/inbox, no minimum order.
Get Pre-Warmed Inboxes from $4.99 →Steps 2–8 pre-completed · Good/High Postmaster · Verified DNS · Dedicated US and EU IPs · 24hr delivery
About Litemail — Pre-warmed GWS and MS365 inboxes from $4.99/inbox. Automated DNS, dedicated US and EU IPs, full admin access. litemail.ai · View plans →
Related reading: Cold Email Inbox Warmup Schedule: 60 Days · SPF, DKIM, DMARC Auto-Setup 2026 · Email Warm-Up vs Pre-Warmed Inboxes 2026 · Buy Pre-Warmed Domains for Cold Email 2026 · Cold Email Deliverability Guide 2026 · Litemail Pre-Warmed Inboxes — Plans and Pricing
