How to Set Up Google Workspace Correctly for Cold Email

Getting Google Workspace set up correctly for cold email has about a dozen steps that all need to be right. Skip one and you're running campaigns with a configuration problem that will show up weeks later as spam placement. Here's the complete setup guide.

Step 1: Domain selection and purchase

Buy a new domain (or use a domain with at least 30 days of age)
Domain should be related to your business or client's industry — not an obvious spam pattern
Set up a basic redirect to your main website from the sending domain
Ensure redirect is http → https and both root and www work (verify here)

Step 2: Google Workspace account setup

Create a GWS account on the domain (Business Starter is sufficient for cold email)
Use a professional email address format: firstname@domain.com or firstname.lastname@domain.com
Maximum 3 email accounts per domain for cold email
Connect the domain to GWS and verify ownership via DNS

Step 3: SPF configuration

Add this TXT record to your domain DNS:

v=spf1 include:_spf.google.com ~all

Verify with the SPF checker. If you're also sending through other services, add their includes before the ~all. Never have more than one v=spf1 record.

Step 4: DKIM activation

Google Admin Console → Apps → Google Workspace → Gmail → Authenticate email
Select your domain
Click "Generate new record"
Copy the provided DNS record (it's a TXT record for google._domainkey.yourdomain.com)
Add this record to your domain DNS
Wait 10–15 minutes for DNS to propagate
Return to Google Admin and click "Start authentication"
Verify with the DKIM checker — check the "google" selector

Step 5: DMARC setup

Add this TXT record for _dmarc.yourdomain.com:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Start with p=none — this monitors without filtering. After 2–4 weeks of clean data, you can move to p=quarantine. Verify with the DMARC lookup.

Step 6: Tracking domain setup

Purchase a separate domain (not a subdomain of your sending domain)
Add the CNAME record your ESP specifies (e.g., track.yourcoldemaildomain.com CNAME [esp-tracking-host])
In Cloudflare: set to DNS Only (grey cloud, not orange)
Verify CNAME and SSL with the tracking domain checker

Step 7: Warmup configuration

Connect the GWS inbox to your warmup tool
Set sending limits in your warmup tool: 3 per day in week 1
Run warmup for 21 days minimum before any live sends
Week 1: 3/day → Week 2: 6/day → Week 3: 10/day → Week 4: 15/day

Step 8: Pre-launch verification

Before the first live send, run:

Inbox placement test — confirm inbox placement, check auth results in output
Blacklist check — confirm clean
Warmup readiness check — confirm all signals are green

If the placement test shows spam, stop. Diagnose before sending any campaign emails.

Step 9: Campaign configuration

Configure your ESP to use the GWS inbox (SMTP or API depending on tool)
Set daily send limit in your ESP to 15 (GWS max for cold email)
Ensure the From address matches the GWS account
Configure tracking to use your separate tracking domain
Set reply routing to the GWS inbox

Use the launch checklist to verify all of these before the first campaign send.