Google Workspace Email Warmup: How to Do It Right Before Cold Outreach

Google Workspace gives you a professional mailbox on your own domain, powered by Google's infrastructure. That is good for reliability and familiarity. It is not, by itself, good for deliverability. A new Google Workspace mailbox starts with zero sender reputation, regardless of which servers are sending your mail. The reputation that Gmail's spam filter cares about is attached to your domain, not to Google's IP addresses.

If you set up Google Workspace for cold email this week and start sending campaigns next Monday, you will almost certainly land in spam. Not because the platform is unreliable, but because your domain has no history with Gmail's filter. Warmup is how you build that history before your first campaign goes out.

Why Google Workspace still needs warming up

A common misconception among first-time cold email senders is that using Google's infrastructure gives you a shortcut on deliverability. It does not. Gmail's spam filter evaluates the domain in the From header, not the mail server's IP address. Two mailboxes on Google's servers can have completely different domain reputations if one belongs to a warmed, trusted domain and the other was registered last week.

In fact, sending cold email from a brand new Google Workspace account without warmup carries a specific risk: your initial sending looks identical to thousands of other accounts that just signed up. Gmail's classifier has seen that pattern many times, and a significant share of those accounts were bulk senders or spam.

What warmup does is create a behavioural fingerprint that distinguishes your domain from a bulk-sender account. It generates genuine engagement signals — replies, spam-folder rescues, stars, and opens — through a peer network, before your cold campaigns begin.

Authentication setup in Google Workspace (do this before warmup starts)

Warmup on a misconfigured domain is wasted effort. Before you connect any warmup tool, confirm all of these records are live and passing.

DKIM

Go to Admin Console > Apps > Google Workspace > Gmail > Authenticate email. Generate a new DKIM key — use 2048-bit, not 1024-bit. Copy the TXT record Google provides and add it to your DNS at the displayed selector subdomain, usually google._domainkey.yourdomain.com. Wait for DNS propagation, then click Start Authentication in the Admin Console.

You will know DKIM is working when you send a test email to a Gmail address you control, open the original headers, and see DKIM: PASS with d=yourdomain.com.

SPF

Google Workspace requires a TXT record at the apex of your sending domain. The minimum record looks like this:

v=spf1 include:_spf.google.com ~all

If you also send through a CRM, a transactional email provider, or a campaign tool that sends on your behalf, add their include to the same record. Never publish more than one SPF TXT record per domain — multiple records cause an automatic SPF failure.

DMARC

Google Workspace does not create a DMARC record for you. Add one manually as a TXT record at _dmarc.yourdomain.com. Start with monitor-only so you can review your sending posture before enforcing anything:

v=DMARC1; p=none; rua=mailto:[email protected]; fo=1

Read the DMARC aggregate reports for 14 to 30 days before moving to p=quarantine, then p=reject. The reports show you everything sending on your behalf — including systems you may have forgotten about.

MTA-STS

MTA-STS forces TLS encryption on inbound mail to your domain. Google Workspace supports it, but you must host the policy file at https://mta-sts.yourdomain.com/.well-known/mta-sts.txt and add a TXT record at _mta-sts.yourdomain.com. Most senders tackle this after DMARC is solid, not before.

How to warm up a Google Workspace mailbox

Once authentication is clean, the warmup process is straightforward. Connect your Google Workspace mailbox to a warmup tool using either OAuth (single sign-in, no extra credentials) or an app password, which you generate inside your Google Account security settings.

The warmup tool will begin generating low-volume, conversational traffic between your mailbox and a network of peer mailboxes. Over 14 to 28 days, the volume ramps gradually. Peer mailboxes open your messages, reply with quoted history, star them, and rescue any that land in spam back to the inbox. Each of those actions is a positive reputation signal that Google's spam filter registers.

Realistic warmup timelines for Google Workspace mailboxes:

• ✦New domain (under 30 days old): 21 to 28 days of warmup before any cold email. Domain age matters more than provider.
• ✦Domain aged 30 to 180 days: 14 to 18 days. Most mailboxes reach a health score above 80 by day 10 to 12.
• ✦Domain over 180 days old with a clean history: 7 to 10 days. Some push to 5 days, at the cost of higher early-campaign spam rates.
• ✦Previously used domain with deliverability problems: assess carefully. Some recover in 30 days; others are better retired.

These timelines assume no cold email during the warmup window. Even a small batch of cold messages mid-warmup introduces inconsistent signals and can push back readiness by a week or more.

Connect your domain to Google Postmaster Tools

If you are warming a Google Workspace mailbox for outreach, Postmaster Tools is not optional. It is free, takes five minutes to set up, and shows you the actual domain reputation, spam rate, IP reputation, authentication pass rate, and delivery error data that Gmail uses.

Go to postmaster.google.com, add your sending domain, and verify ownership with a DNS TXT record. Data appears within a few days of starting warmup. Once the Domain Reputation tab shows data, check it weekly. High means you are in good shape. Medium means you are on the edge — do not scale. Low means cold sending should stop until it recovers.

Common mistakes with Google Workspace warmup

• ✦Using your primary business domain for cold outreach. Your business email domain carries your company's reputation for transactional and client email. A failed cold campaign damages both. Always register a separate sending domain for outreach.
• ✦Warming without configuring DKIM first. DKIM is the most important authentication signal for Gmail. Running warmup without it produces signals that cannot fully count — you are building on an incomplete foundation.
• ✦Expecting Google's infrastructure to help your deliverability. Google's IP addresses do not carry your domain's reputation to other Gmail recipients. The reputation is attached to your domain. Shared infrastructure helps reliability, not standing with the spam filter.
• ✦Stopping warmup when campaigns start. Warmup should continue at reduced volume while campaigns are active. Domain reputation decays during quiet periods. Senders who pause warmup and later see deliverability drop when they restart campaigns usually experienced atrophy, not damage.
• ✦Sharing the warmup mailbox with regular business correspondence. Keep the mailbox used for outreach separate from any mailbox that handles real business email. Mixed-use mailboxes produce mixed signals.
• ✦Warming an alias instead of a real mailbox. Aliases share the sending reputation of the underlying mailbox. Warmup tools need to connect to a real mailbox to generate outbound traffic and receive peer replies.

How to know your Google Workspace mailbox is ready

Calendar days are a useful guide, not a guarantee. Use these signals to confirm actual readiness before sending your first campaign:

1. Health score above 80 for at least three consecutive days in your warmup tool.
2. Gmail Postmaster domain reputation showing High, with spam rate below 0.10%.
3. Inbox placement above 95% in seed tests covering Gmail and at least one Outlook environment.
4. DMARC aggregate reports clean for the past 14 days with no unexpected sending sources.
5. Spam recovery rate in the warmup tool trending down, meaning fewer messages land in spam to begin with.

If four out of five are solid, you can begin cold sending at 20 to 30% of target volume and ramp by 20% each week. If fewer than four are true, keep warming and check again in three days.

Where Warmerly fits in this process

Warmerly connects to Google Workspace mailboxes via OAuth, so setup takes under two minutes without generating an app password. Once connected, it monitors your SPF, DKIM, DMARC, and MTA-STS records daily. If any record fails or drifts out of alignment, you get an alert with specific remediation steps — not a red badge and a shrug.

Inbox placement tests run continuously across Gmail, Outlook.com, Microsoft 365, and three other providers. The health score dashboard updates daily and surfaces early warnings before a problem compounds into a domain you have to retire.

Warmup is available on every Warmerly plan, including the entry-level Solo tier. Whether you are warming one Google Workspace mailbox before a first campaign or managing multiple sending domains across an agency, the process is the same: connect the mailbox, let it run, and act on the signals before they become problems.