How to audit cold email tool settings for deliverability?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

You've set up your cold email tool, configured the domains, and campaigns are running. But over time, configuration drift happens. A sending limit gets changed, a DKIM key expires, or an unsubscribe setting gets misconfigured. This is why a regular audit catches problems before they tank your deliverability.

Authentication audit. Start with the foundation. For each sending domain, verify that SPF, DKIM, and DMARC records are live and correct. Don't just assume they're still valid. DKIM keys need to be 2048-bit minimum (smaller keys get rejected by modern ISPs). Check your tool's records against what you actually have in DNS. If your tool doesn't validate records automatically, use a free checker to spot errors or expirations.

Sending configuration audit. This is where many people slip up. Review your per-mailbox daily limits (should be under 50 messages per mailbox per day for new domains). Check throttling and delay settings. Verify that business hour configurations actually match your time zone, not some default. I've seen people sending at 3 a.m. in their recipients' time zone because they didn't check this.

List management audit. Suppression lists work only if they're actually working. Test that bounce handling removes addresses automatically. Check how fast unsubscribe requests process (should be hours, not days). Verify your CRM sync is current and not stalled.

Warmup and tracking audit. If you're using warmup, confirm each mailbox has finished warmup before blending in real campaigns. Check that tracking domains are configured separately from your sending domain (mixing them damages reputation). Test link and pixel tracking across Gmail, Outlook, and Apple Mail to make sure nothing's broken.

Monitoring audit. Set up Google Postmaster Tools access for each domain. Enable blocklist monitoring (we have a free blocklist checker you can use). Configure alerts so you catch problems when they emerge, not weeks later.

Pick a cadence. Run this audit monthly if you're actively sending, or quarterly if you're stable. The goal is catching drift before it becomes damage.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Get your personalized audit checklist

I manage cold email with tool name, and I want to make sure nothing's drifted in my setup. Walk me through checking my SPF, DKIM, and DMARC records step by step. What should I be looking for, how do I know if something's misconfigured, and how often should I run this audit?

Edit the yellow boxes, then send to the AI of your choice.