Implementation Guides·Updated 2025-07-01·9 min read

How to Set Up Microsoft 365 for Cold Email

Step-by-step guide to configuring Microsoft 365 for cold email — account setup, mailbox creation, DNS authentication, and integration with cold email tools.

Quick Answer

Sign up for Microsoft 365 Business Basic ($6/user/month), create 3–5 mailboxes with real names, configure SPF, DKIM, and DMARC through the admin center, then verify DNS and begin warmup.

Why Microsoft 365 for Cold Email
Step 1: Sign Up for Microsoft 365
Step 2: Create Mailboxes
Step 3: Configure DNS Records
Step 4: Verify DNS and Test
Step 5: Integrate with Cold Email Tools

Introduction

Microsoft 365 is a solid alternative to Google Workspace for cold email hosting. It offers reliable infrastructure, built-in authentication tools, and compatibility with all major cold email platforms.

This guide walks through the complete setup: from creating your Microsoft 365 account to configuring DNS records and preparing for warmup.

Who This Guide Is For

• Teams that already use Microsoft 365 for business
• Founders who prefer the Microsoft ecosystem
• Anyone setting up cold email infrastructure with Exchange Online

Key Takeaways

1. Microsoft 365 Business Basic is the most cost-effective plan for cold email
2. Create mailboxes with real first names, not generic addresses
3. DKIM is enabled through the Defender portal, not the admin center directly
4. Start DMARC in monitoring mode (p=none) before enforcing
5. Microsoft 365 supports up to 10,000 emails per mailbox per day

Why Microsoft 365 for Cold Email

Exchange Online provides reliable, high-reputation email infrastructure
Built-in DKIM signing through the Defender portal
Compatible with all major cold email tools via SMTP or API
Up to 10,000 sent emails per mailbox per day (Microsoft's limit)
Strong authentication and security features
Good option for teams already in the Microsoft ecosystem

Step 1: Sign Up for Microsoft 365

Go to microsoft.com/en-us/microsoft-365/business/compare-all-plans
Select Business Basic ($6/user/month) — this includes Exchange Online
Enter your business information and creating a Microsoft account
Choose 'I'll use a domain I already own' and enter your sending domain
Complete the signup process and verify domain ownership

💡 Tip

Business Basic is sufficient for cold email. You do not need the desktop apps or advanced security features of higher-tier plans.

Step 2: Create Mailboxes

Go to admin.microsoft.com > Teams & groups > Active teams & groups > Users
Click 'Add a user' for each mailbox
Use real first names: jane@, mike@, sarah@, alex@, etc.
Assign a license to each user
Save login credentials securely

Create 3–5 mailboxes to start. You can add more later as you scale. Real names (jane@) outperform generic addresses (info@) in cold email reply rates.

Step 3: Configure DNS Records

MX Record

Microsoft 365 requires an MX record for email delivery. In your domain's DNS, add the MX record pointing to your Microsoft 365 region (e.g., yourdomain-com.mail.protection.outlook.com). The admin center will show you the exact value.

SPF Record

Add a TXT record at the root of your domain: v=spf1 include:spf.protection.outlook.com ~all. This authorizes Microsoft's servers to send email on behalf of your domain.

DKIM Configuration

DKIM in Microsoft 365 is enabled through the Microsoft 365 Defender portal. Go to policies.microsoft.com > Email authentication > DKIM. Select your domain and click 'Enable DKIM signatures.' Microsoft will generate the keys and add the DNS records automatically in some cases, or provide the DNS values for manual configuration.

DMARC Record

Add a TXT record at _dmarc.yourdomain.com: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. Start with p=none for monitoring. See our DMARC guide for the full policy progression.

📝 Example

Microsoft 365 Defender portal showing DKIM configuration page with domain selection and enable button.

Step 4: Verify DNS and Test

Wait 24–48 hours for DNS propagation
Check MX record at MXToolbox — should point to protection.outlook.com
Check SPF TXT record at MXToolbox
Check DKIM records at the selector subdomains
Check DMARC record at _dmarc.yourdomain.com
Send a test email to mail-tester.com to verify authentication

Step 5: Integrate with Cold Email Tools

Most cold email tools connect to Microsoft 365 via SMTP. Use these settings:

Setting	Value
SMTP Server	smtp.office365.com
Port	587
Encryption	STARTTLS
Authentication	OAuth2 or username/password

For better security, use OAuth2 authentication where supported. Some tools require you to enable SMTP authentication in the admin center under Settings > Org settings > Modern authentication.

Best Practices

✓ Use Business Basic plan for cost efficiency
✓ Create 3–5 mailboxes with real first names
✓ Enable DKIM through the Defender portal — not just DNS
✓ Configure SPF and DMARC alongside MX records
✓ Verify all DNS records before starting warmup
✓ Use SMTP with OAuth2 for cold email tool integration

Mistakes to Avoid

✗ Forgetting to enable DKIM in the Defender portal
✗ Not adding the MX record for email delivery
✗ Using a single mailbox for all outreach
✗ Not enabling SMTP authentication for cold email tools
✗ Setting DMARC to p=reject immediately

Expert Tips

★ Microsoft 365's DKIM setup requires enabling in the Defender portal — DNS records alone are not enough
★ If your cold email tool cannot connect via SMTP, check that modern authentication is enabled
★ Microsoft's sending limits are generous (10,000/day) but for cold email, stay under 80/mailbox/day
★ Use the Inbox Readiness Score to verify your Microsoft 365 setup before warmup

Microsoft 365 Setup Checklist

☐ Microsoft 365 Business Basic plan purchased
☐ Sending domain added and verified
☐ MX record configured (points to protection.outlook.com)
☐ SPF record added (include:spf.protection.outlook.com)
☐ DKIM enabled in Defender portal and DNS records configured
☐ DMARC record added with p=none
☐ All DNS records verified at MXToolbox
☐ Test email passes at mail-tester.com
☐ SMTP authentication enabled for cold email tool

Summary

Microsoft 365 provides reliable email hosting for cold email at $6/user/month. The setup involves creating the account, adding your sending domain, creating mailboxes, and configuring DNS authentication records.

The key difference from Google Workspace is that DKIM must be enabled through the Microsoft 365 Defender portal, not just through DNS. Make sure you complete this step or DKIM will not work.

After setup, verify all DNS records and begin warmup. Follow our warmup guide for the complete schedule.

Frequently Asked Questions

Which Microsoft 365 plan should I use?

Business Basic ($6/user/month) is sufficient. It includes Exchange Online with full SMTP access. You do not need desktop apps or advanced security for cold email.

Why is DKIM not working after adding DNS records?

Microsoft 365 requires you to enable DKIM signing in the Defender portal in addition to adding DNS records. Go to policies.microsoft.com > Email authentication > DKIM and enable it for your domain.

Can I use an existing Microsoft 365 account?

Yes, but add your sending domain as a new domain in the admin center. Create separate mailboxes for cold email — do not use your primary business mailboxes.

What SMTP settings do cold email tools need?

smtp.office365.com on port 587 with STARTTLS. Use OAuth2 authentication where supported for better security.