Google Postmaster Tools for Cold Email: The Complete 2026 Reference

If you send cold email at any meaningful volume, Google Postmaster Tools is the most important free resource you are probably underusing.

It is the only place Google publishes their own assessment of your sending reputation — domain reputation, IP reputation, authentication pass rates, spam-complaint rate, encryption status. No third-party tool can give you this data because it is measured inside Google's own infrastructure against billions of inboxes.

But Postmaster Tools is also designed for transactional and marketing email senders, not cold outbound. Half the metrics do not behave the way you would expect on cold email volumes. The other half are critical and need to be checked weekly.

This guide is the read-it-once-and-bookmark-it reference: full setup walkthrough, what each Postmaster metric means specifically for cold email, the exact thresholds that matter, how to react when each one drops, how Postmaster compares to Microsoft SNDS for Outlook senders, what to do if your Google account gets disabled mid-warmup, and how ColdRelay's infrastructure is built to optimize for the signals Google measures.

TLDR — the three Postmaster numbers that matter for cold email:

1. Domain Reputation must be High. Medium is workable for the first 30 days of warmup; after that, Medium is a warning state.
2. Spam Rate must be below 0.10%. Above 0.30% is account-killing territory.
3. Authentication pass rates must be above 99% for SPF, DKIM, and DMARC individually.

If any of those three is off, nothing else matters — your campaigns are losing the deliverability fight before they start.

Table of Contents

• The 30-second answer
• Setting up Postmaster Tools (full walkthrough)
• Every dashboard explained
• Decision actions per warning state
• What Postmaster does NOT tell you
• Microsoft SNDS — the Outlook equivalent
• What to do if Postmaster access gets disabled
• How ColdRelay optimizes for Postmaster signals
• The weekly Postmaster routine
• FAQ

The 30-Second Answer

Google Postmaster Tools shows you 6 dashboards per verified domain:

For cold email, three numbers matter most: Domain Reputation must be High, Spam Rate must be below 0.10%, Authentication pass rate must be above 99%. If any of those is off, nothing else matters — your campaigns are losing the deliverability fight before they start.

Setting Up Postmaster Tools (The Full Walkthrough)

Adding a domain to Postmaster Tools takes 5 minutes if you know exactly what to do. The most common failure point is the verification TXT record — either the record is wrong, or DNS has not propagated, or you are trying to verify a subdomain when you meant the root.

Step 1: Sign In

Go to postmaster.google.com and sign in with a Google account. Best practice: use the same Google account that owns your business email infrastructure (e.g., your Workspace admin), so the verification persists if other team accounts churn.

Step 2: Add a Domain

Click Add Domain in the top-right corner. Enter your root sending domain (e.g., outbound.yourcompany.com or yourcompany.com — whichever appears in the From header of your cold email).

Important detail: Postmaster Tools tracks the domain you put in the From header, not your MX/receiving domain. If you send from sales@outbound.yourcompany.com but receive on yourcompany.com, you verify outbound.yourcompany.com in Postmaster.

Step 3: Verify Ownership via DNS

Google gives you a TXT record to add to your DNS:

Host:  yourdomain.com (or @ for root)
Type:  TXT
Value: google-site-verification=AbCdEf123456...

Add this in your DNS provider. Wait for propagation (typically 15 minutes to 4 hours; can be up to 48 hours on slow DNS providers). Return to Postmaster Tools and click Verify.

ColdRelay customers can skip the manual step: the ColdRelay dashboard adds the verification TXT record automatically when you enable the Postmaster Tools integration on a domain. Saves about 10 minutes per domain.

Step 4: Wait for Data to Populate

This is the part that surprises new users. Postmaster Tools only shows data for domains that send >100 messages/day to Gmail addresses. Below that volume threshold, Gmail does not bother computing your reputation — the dashboards stay blank.

This is the first surprise for many cold email senders: if you are warming up a brand-new domain at the canonical 2/day per mailbox, you need ~50+ mailboxes on the same domain (which ColdRelay supports natively, but Workspace does not) before you cross the 100 messages/day Gmail threshold. For Workspace-based senders running 2 mailboxes per domain at 2 sends/day, you literally cannot trigger Postmaster Tools data without dramatically more domains.

Realistic timeline for cold email setups:

• Workspace senders (2 mailboxes/domain × 2 sends/day = 4 sends/day per domain): Postmaster will likely never populate. Use it as an early-warning system across aggregated subdomain views instead.
• ColdRelay (100+ mailboxes/domain × 2 sends/day = 200+ sends/day per domain): Postmaster populates within 7–14 days of warmup completion.

Step 5: Verify Multiple Domains Up-Front

If you send from multiple outbound domains (typical at scale), verify all of them at once. There is no limit to how many domains you can add. Most cold email operations end up with 5–50 verified domains in Postmaster, one per sending domain.

Step 6: Optional — Grant Access to Team Members

Postmaster Tools supports multiple users per domain (similar to Google Search Console). Add anyone on your team who monitors deliverability. ColdRelay customers can grant read-only access to ColdRelay's deliverability team if they want the platform to pull Postmaster data into their dashboard.

What Each Dashboard Actually Means for Cold Email

Domain Reputation

Google buckets every sending domain into one of four buckets:

• High — Gmail trusts your domain. Mail lands in the inbox by default. Where you want every cold email domain to live.
• Medium — Gmail has mixed signals on you. Some mail inboxes, some lands in Promotions, some in Spam. Most cold email domains start here and progress to High during warmup.
• Low — Gmail thinks you are probably spam. Mail goes to Spam by default with rare inbox placement. A domain in Low is effectively dead for cold email — recovery takes weeks of aggressive warmup at reduced volume.
• Bad — User complaints + filter signals say you are abusive. Almost all mail goes to spam, some gets dropped silently. A Bad domain is past the point of recovery for cold email purposes — burn it and provision a fresh one.

What the chart actually looks like: a time-series with daily reputation tier on the Y-axis (High/Medium/Low/Bad) over a 90-day rolling window. The line is usually flat for healthy domains; the moment it drops a tier, you have 2–7 days before downstream inbox placement degrades visibly.

Cold email gotcha: domain reputation can change overnight based on a spike in user complaints. One bad campaign with a poorly-targeted list can drop a High-reputation domain to Medium within 48 hours. The damage compounds — Medium reputation means worse inbox placement means lower reply rates means worse engagement signals means Low reputation.

IP Reputation

Same buckets as Domain Reputation, but for each sending IP. With dedicated IPs (which every ColdRelay customer gets), your IP reputation is fully under your control — no shared-IP "neighbor problem" where another sender's bad campaign drags your IP into Low. On shared IPs (most cheap cold email infrastructure providers, all of Google Workspace), one bad neighbor can sink your inbox placement for weeks.

Cold email reality: IP reputation matters slightly less than Domain Reputation for cold email at modest volumes (under 10K/day), because Gmail weights domain reputation more heavily for B2B mail. At higher volumes (50K/day and above) IP reputation becomes the bottleneck.

For more on the shared vs dedicated IP question, see why dedicated IPs matter and the cold email infrastructure cost breakdown.

Authentication

Three sub-metrics: SPF pass %, DKIM pass %, DMARC pass %. All three should be >99% on any properly-configured cold email infrastructure.

If any of these is below 99%, your authentication is broken and fixing it takes priority over every other deliverability optimization. ColdRelay's automatic SPF/DKIM/DMARC configuration (how it works) keeps all three pass rates pinned at 100%. For provider-by-provider setup, see the SPF, DKIM, DMARC complete guide.

Common failure patterns and fixes:

• SPF passing but DKIM failing: the most common cause is your sending tool re-signing messages with a different key than what is published in DNS. Verify your DKIM selector matches what the sending server uses. See 550 5.7.1 DKIM fail (Gmail).
• DKIM passing but DMARC failing: alignment failure. Your From-header domain does not align with the SPF/DKIM domain. Fix by using CNAME-based DKIM signing that publishes under your domain. See 550 5.7.1 DMARC fail (Gmail).
• SPF intermittently failing: you may be hitting the 10-lookup limit. Run the SPF generator to count lookups. See 550 5.7.1 SPF permerror for the diagnostic.

Encryption (TLS)

Should be >95% on any modern setup. If you see a lower number, you are delivering some messages to receiving servers that do not support TLS — increasingly rare in 2026, but possible if you are emailing very old corporate or self-hosted mail servers. Not a cold email priority unless you are seeing a number below 80%.

What to do if TLS drops below 90%: check the recipient domain pattern. Most likely you are sending to a cluster of legacy mail servers that do not support modern STARTTLS. Either drop those contacts from your list (probably worth doing — they cannot receive most modern email anyway) or accept the TLS hit for that segment.

Delivery Errors

The percentage of messages Gmail rejected or deferred. For cold email, keep this below 5%. Common causes of high delivery-error rates:

• Spam-filtering rejects — Gmail decided your message looked like spam at the SMTP layer and refused to accept it. Different from the message landing in the spam folder; this is "we won't even deliver it." Investigate via SMTP error codes — most spam-filtering rejects return 550 5.7.1 with specific reasoning.
• Rate-limit rejects — you exceeded Gmail's per-recipient or per-IP send rate. For cold email at the 2/mailbox/day ColdRelay enforces, this should never happen. If you see rate-limit errors, something is misconfigured upstream.
• Bounces — hard bounces (invalid recipient) get counted here. A high bounce rate is the #1 cold email deliverability killer — list hygiene is non-negotiable. See bounced email explained for the bounce-code breakdown.

Spam Rate

The most important single metric. User-reported spam complaints as a percentage of total volume.

Threshold table for cold email:

Cold email math: at 0.30% spam rate on 1,000 sends/day, that is 3 complaints/day. Three complaints in one day from one domain is enough for Gmail to flag you. Stay paranoid about list quality. The Feb 2024 Gmail/Yahoo bulk-sender rule explicitly cites 0.30% as the enforcement threshold for spam complaints; above 0.10% triggers warnings even for senders below the bulk threshold.

Decision Actions Per Warning State

Postmaster Tools is most useful as a trigger system: when X happens, you do Y. Here is the canonical action table:

When Domain Reputation Drops to Medium

Diagnosis (run all):

1. Check the past 7–14 days of campaigns. Which had unusual complaint rates?
2. Check Authentication pass rates — any dropped from 100% to lower?
3. Check Delivery Errors — any spike in 550 or 421 rejects?
4. Check campaign-level reply rates for the past week vs trailing 30-day average.

Action:

• Pause the highest-complaint campaign immediately.
• Re-verify the list for that campaign before resuming.
• Drop overall send volume by 50% for 7 days.
• Increase warmup ratio temporarily (3 warmup + 1 outbound per mailbox per day for 10 days, then back to 2-and-2).

Recovery timeline: 14–21 days back to High if you act fast. 30+ days if you wait.

When Domain Reputation Drops to Low

Action:

• Stop all cold email on the affected domain immediately.
• Maintain warmup only at 2/day per mailbox.
• Investigate root cause — almost always a list-source quality problem or a content-trigger problem.
• After 7 days of warmup-only with clean reports, resume real outbound at 25% of normal volume for 14 days.

Recovery timeline: 4–8 weeks to High. Some domains never come back. Have a backup domain warmed up in parallel.

When Domain Reputation Drops to Bad

The domain is functionally dead for cold email. Recovery is theoretical, not practical. Burn the domain, provision a fresh one, and pull lessons-learned about what caused it (almost always: scraped list with spam traps, or content that triggered ML filters).

When Spam Rate Crosses 0.10%

Action:

• Identify which campaign in the past 7 days drove the complaints.
• Improve list quality for that segment (re-verify, drop catch-alls, drop free-email-domain contacts if unintentional).
• Audit subject line for spam-trigger language.
• Reduce send volume for the affected mailboxes by 30% until rate returns below 0.05%.

When Spam Rate Crosses 0.30%

Action:

• Stop sending on the affected domain immediately.
• Do not try to "ride it out" — every additional send while reputation is dropping makes recovery harder.
• Pause for 7 days minimum, then resume at 50% of normal volume with stricter list filtering.
• If the rate does not come back below 0.10% within 2 weeks, the domain may be unrecoverable.

When Authentication Pass Rate Drops Below 99%

Action:

• Identify which protocol (SPF, DKIM, or DMARC) dropped.
• Send a test email to a Gmail address you control, check headers, isolate which selector or include is failing.
• For SPF failures, run the SPF generator to verify under 10 lookups.
• For DKIM failures, verify the selector in your DNS matches what the sending server signs with.
• For DMARC failures, verify alignment — adkim=r; aspf=r should be set.

Recovery: within 4–24 hours of fixing the root cause (DNS propagation lag).

When Delivery Errors Spike Above 5%

Action:

• Pull the error breakdown if your sending tool surfaces it.
• Match errors to the SMTP error codes reference for diagnostic steps per code.
• Most common cold email cause: high bounce rate from bad list quality. Re-verify list, suppress failing addresses.
• Second most common: rate-limit rejection from over-sending. Reduce per-mailbox volume to the 2/day canonical cap.

What Postmaster Tools Does NOT Tell You

Postmaster has real limits — knowing them is half the battle:

1. It is Gmail-only. Outlook, Yahoo, Apple Mail, custom domains hosted elsewhere — none of them show up. For cold B2B email where ~70% of your contacts use Gmail (Google Workspace), Postmaster covers most of your inbox. But if your ICP is heavy on Outlook or Microsoft 365 (e.g., enterprise sales), you will need Microsoft SNDS in addition.

2. There is a 24–48 hour lag. The data you see today reflects yesterday's sending. By the time Domain Reputation drops to Medium, your bad campaign has already been running for a day or two.

3. The "Domain Reputation" classification is somewhat opaque. Google does not publish the exact algorithm. You can see your bucket, but not "you are at 73 out of 100" or "you need 5 fewer complaints to move up a tier." It is directional, not precise.

4. Spam rate only counts user-reported spam. Mail that lands in the Spam folder via automatic classification (not a user pressing "Report Spam") does not show up in this metric. Your actual spam-folder hit rate is invisible — you have to infer it from reply rates and Domain Reputation drops, or run inbox placement tests directly.

5. It does not show you reply rates or engagement. Gmail measures engagement signals (opens, replies, time-in-inbox) and uses them to update reputation — but those measurements stay inside Google. You only see the downstream classification.

6. It does not break down per-mailbox performance. All data is at the domain level. If you have 50 mailboxes on a domain and one of them is the source of all the complaints, Postmaster cannot tell you that. You need workspace-level dashboards (which ColdRelay provides) to isolate per-mailbox issues.

7. It does not retain data forever. Postmaster's rolling window is 90 days for most metrics. Older data is gone. If you need long-term reputation history, snapshot the dashboards monthly or use a tool (ColdRelay does this automatically) that archives the metrics.

Microsoft SNDS — the Outlook Equivalent

For senders whose ICP is heavy on Outlook (enterprise sales, Microsoft-shop verticals), Postmaster Tools is half the picture. The Outlook equivalent is Smart Network Data Services (SNDS).

What SNDS Shows

• IP color status per sending IP: Green (good), Yellow (moderate), Red (bad).
• Complaint rate per IP.
• Trap-hit rate — how often you sent to spam traps Microsoft maintains (a major reputation signal).
• Filter result — what Outlook's spam filter did with your mail.

Key Differences vs Postmaster

When to Use Which

• Gmail-heavy ICP (typical B2B SaaS, marketing agencies, recruiters): Postmaster is primary. SNDS is a nice-to-have.
• Outlook-heavy ICP (enterprise sales, government, healthcare): SNDS is primary. Postmaster still useful but less complete coverage.
• Both: run both. The signals complement each other.

ColdRelay customers can request SNDS pre-configuration the same way they get Postmaster Tools integration — saves the PTR setup hassle.

What to Do If Postmaster Access Gets Disabled

Two scenarios where you lose Postmaster access:

Scenario 1: The Google account that owns the verification gets disabled

Common when a Workspace admin who set up Postmaster leaves the company and the account churns. Symptom: you can no longer log in to see the data.

Fix:

1. Sign up a new Google account (any account — not necessarily one with email).
2. Re-verify ownership on each domain. The TXT record method works for any Google account.
3. Re-add team members.

You lose historical data older than 90 days (which Postmaster does not retain anyway). Current data resumes within 24 hours of re-verification.

Scenario 2: Postmaster Tools itself shows "no data" after previously showing data

Two causes:

1. You are sending less than 100 messages/day to Gmail. Postmaster's threshold. Increase volume or accept the data gap.
2. Your domain got reputation-banned hard enough that Google stopped surfacing data. Rare. Implies the domain is functionally dead for cold email. Provision a fresh domain.

Scenario 3: Your Workspace account got suspended for cold outbound

If you were using Workspace as your sending infrastructure and Google suspended the account for ToS violations, Postmaster Tools access for that domain may go with it. The fix is structural: move sending to dedicated cold email infrastructure (this is one of the core reasons not to send cold from Workspace). See Google Workspace vs dedicated cold email infrastructure for the migration path.

How ColdRelay Optimizes for the Signals Postmaster Measures

Every choice in ColdRelay's infrastructure stack maps to a specific signal Gmail measures:

The cap of 2 outbound sends per mailbox per day is the single most counter-intuitive design choice — every customer asks why we do not let them send more. The answer: at 5+ sends per mailbox per day, complaint rates spike linearly, and Domain Reputation drops to Medium within a week. Two sends per mailbox per day is the volume that keeps Postmaster's Domain Reputation pinned at High over multi-month campaigns. It is the math, not an arbitrary limit. See the canonical pricing and cap reference at /pricing and the cold email warmup complete guide for the deeper warmup mechanics.

A Weekly Postmaster Tools Routine

Set 10 minutes aside every Monday:

1. Check Domain Reputation for each domain. If any dropped from High to Medium, identify the campaign that ran in the past 7 days that caused it. Pull that campaign offline immediately.
2. Check Spam Rate — anything above 0.10% gets investigated this week.
3. Check Authentication pass rates — all three should still be 99%+.
4. Skim Delivery Errors — if the chart jumped, look at what type of error grew. Cross-reference with the SMTP error codes reference.
5. Skim IP Reputation — for ColdRelay customers, this should be flat-line High. If it drops, that is a blocklist event we would already have alerted you on. See the blocklist removal hub for the remediation workflow.
6. Note the trend lines — Postmaster shows rolling 90-day data. Are things gently improving, stable, or gently declining? The week-over-week direction matters more than the absolute number.

That is it. Postmaster Tools is a 10-minute-per-week routine, not a daily obsession. The infrastructure decisions you made before sending the first email matter 10x more than what you do in the dashboard after.

FAQ

Do I need Postmaster Tools if I am using ColdRelay?

Yes — Postmaster is Gmail's view of your reputation, and Gmail receives roughly 70% of B2B cold email. ColdRelay automates the infrastructure that drives Postmaster's metrics, but you still want the dashboard as an early warning system. We can pre-configure Postmaster verification during ColdRelay onboarding to skip the manual TXT record dance.

My domain is not showing data in Postmaster — why?

Three common causes: (1) you are not yet sending >100 messages/day to Gmail recipients (Postmaster's data threshold); (2) the verification TXT record did not propagate yet (give it 24 hours); (3) you verified the wrong domain — Postmaster tracks the From-header domain, not the MX domain. For brand-new cold email domains in their first 2–3 weeks of warmup, blank Postmaster dashboards are normal.

What is a "good" Domain Reputation score for cold email specifically?

High is the only acceptable steady state. Medium is OK during the first 2–4 weeks of warmup on a brand-new domain (Gmail is still building a baseline). After 30 days, Medium is a warning — something in your sending pattern is dragging the signal.

Can ColdRelay see my Postmaster data?

Only if you grant us read access (we can pull it into your ColdRelay dashboard if you do). Otherwise no — Postmaster data is bound to your Google account. We never need it to do our job; the underlying signals that Postmaster reports on are the same signals our own infrastructure monitoring captures.

What about Microsoft SNDS for Outlook?

Smart Network Data Services is Microsoft's equivalent for Outlook/Hotmail. Same idea — IP-level reputation data, complaint rates, spam-filter classification. Worth adding alongside Postmaster Tools if a meaningful share of your contacts are on Outlook. ColdRelay customers can request SNDS pre-configuration the same way. See the SNDS section above for the comparison.

Spam Rate jumped to 0.4% — what do I do?

Stop all sending on the affected domain immediately. Do not try to "ride it out" — every additional send while your reputation is dropping makes recovery harder. Pause for 7 days minimum, then resume at 50% of normal volume with stricter list filtering. If the rate does not come back below 0.10% within 2 weeks, the domain may be unrecoverable — provisioning a fresh one is faster than rehabilitating.

Why is my IP Reputation High but Domain Reputation only Medium?

Most likely cause: your IP is dedicated (so its reputation is fully under your control), but your domain is sending mail that is generating complaints. Domain Reputation is content-and-list-driven; IP Reputation is mostly volume-and-authentication-driven. Fix list quality and content; IP Reputation will not save you from a Medium domain.

How does Postmaster Tools data correlate with Gmail's actual placement decisions?

Imperfectly but directionally. Domain Reputation in Postmaster is a lagging indicator of Gmail's placement decisions. By the time you see Medium, placement has already been degrading for 24–72 hours. Run inbox placement tests in parallel to get a leading-indicator signal.

What is the 100-messages-per-day threshold and can I get around it?

Gmail requires sustained sending of at least 100 messages/day to a Gmail-hosted address before they will compute and surface reputation data for your domain. There is no way around it — it is a deliberate Google design to avoid surfacing noisy data for low-volume senders. If you cannot hit 100/day with your current mailbox count, either consolidate domains (more mailboxes per domain → more send volume per domain) or accept that Postmaster Tools is not useful for your scale yet.

Does Postmaster Tools work for transactional senders too?

Yes — it is actually designed primarily for transactional and marketing senders. The thresholds (0.10% Spam Rate, High Domain Reputation) are looser than what cold email needs but stricter than what casual senders typically achieve. The same dashboards work; the interpretation differs.

Do I need to verify every cold email domain individually, or just one?

Every domain individually. Postmaster Tools tracks per-domain reputation; there is no "verify once for the whole company" option. At cold email scale (5–50 sending domains), this is a 30–60 minute one-time setup. Worth it.

Can I use Postmaster Tools without owning Workspace?

Yes — Postmaster Tools works for any domain, regardless of whether you use Google Workspace for email. The verification TXT record proves you own the DNS for the domain, which is all Google needs. Sending from non-Workspace infrastructure (ColdRelay, custom SMTP, anything else) is fully supported.

Postmaster Tools is the cheapest deliverability dashboard you will ever have access to. Use it weekly, fix the signals that go red, and trust the infrastructure to handle the rest.

Related reading:

• Cold email deliverability complete guide
• SPF, DKIM, and DMARC for cold email
• Bounced email explained
• Cold email infrastructure cost breakdown
• SMTP error codes reference
• Blocklist removal guides

Start cold email with infrastructure built for Postmaster's metrics → Try ColdRelay free · Test your current setup → Free deliverability test