Google Postmaster Tools is the only direct line you have into how Gmail actually sees your sending domain. It shows you spam complaint rates, IP and domain reputation, authentication pass rates, and encryption coverage for mail you send to Gmail addresses. If you do cold email or run any outbound program in 2026, this is non-negotiable instrumentation. This guide walks through setup, how to read every chart, the thresholds that matter, and how to act when numbers move the wrong direction.
Short answer: Google Postmaster Tools is a free Google service that exposes Gmail's view of your sending domain. To use it, verify your sending domain with a TXT or CNAME record, wait 24-48 hours, then send enough volume to Gmail (a few hundred messages per day minimum) for charts to populate. The signals that matter most are spam rate (keep under 0.10%), domain reputation (target High), and authentication pass rates (target 99%+ on SPF, DKIM, and DMARC alignment).
What Is Google Postmaster Tools?
Google Postmaster Tools is the free dashboard Google provides for high-volume senders to monitor how Gmail handles their mail. It reports on the domain you authenticate with (your DKIM signing domain or your SPF-aligned envelope domain), not on individual mailboxes or IPs in isolation. The reports update daily with a 1-2 day lag and require enough Gmail-bound volume to anonymize data before any chart will render.
Google launched the original version in 2015 and rolled out Postmaster Tools v2 in 2024 with a redesigned interface, faster data refresh, and an API. The classic v1 dashboard still works at postmaster.google.com, while v2 lives at postmaster.google.com/managedomains. Both pull the same underlying signals.
This is the only first-party view Gmail will give you. Third-party deliverability tools estimate inbox placement by sending test messages to seed accounts. Postmaster reports what Gmail itself recorded across your real recipient base. When the two disagree, trust Postmaster.
Why Postmaster Matters More in 2026
In February 2024, Google and Yahoo rolled out sender requirements that effectively made Postmaster mandatory for anyone sending more than 5,000 messages per day to Gmail. The rules require SPF and DKIM, DMARC at least at p=none with alignment, one-click unsubscribe headers (RFC 8058) for bulk mail, and a spam rate under 0.30% with a hard target under 0.10%.
Postmaster Tools is the only place Google publishes your actual spam rate. You can guess at your reputation from open rates and reply rates, but those numbers are noisy and inflated by Apple Mail Privacy Protection and prefetching bots. Postmaster gives you the rate Google calculated, scored against the threshold that controls whether your mail lands in inbox, promotions, or spam.
The 0.30% line: Google's documented threshold for the user-reported spam rate before the domain starts getting filtered aggressively is 0.30%. Above 0.10% you are already in a yellow zone where reputation degrades. Above 0.30% you are actively losing inbox placement. Source: Google's Email Sender Guidelines (2024 update).
How to Set Up Postmaster Tools
Setup takes about 10 minutes plus the propagation wait. Do this for every domain you send cold email from, not just your primary brand domain.
- Go to
postmaster.google.comand sign in with a Google account. Use a shared workspace account if you run an agency or a team - personal Gmail accounts work too but are harder to hand off. - Click "Add domain" and enter your sending domain. Enter the domain you authenticate with (the DKIM
d=domain), not the friendly From domain if they differ. For most setups they are the same. - Copy the TXT verification record Google generates. It looks like
google-site-verification=.... Add this as a TXT record on the root of your domain. - Wait 5-30 minutes for DNS propagation then click Verify in Postmaster. If verification fails, double-check that the TXT record is on the apex (the domain itself, not a subdomain) and that there are no quote-mark issues from your DNS host.
- Repeat for every sending domain. If you use secondary domains for cold outreach (which you should), verify each one separately. Postmaster does not aggregate across related domains.
After verification, you will see empty charts for 24-48 hours. Charts populate once Gmail has enough data to anonymize - generally a few hundred messages to Gmail recipients per day. Domains sending under that threshold will see permanent "Not enough data" messages, which is itself a useful signal: if you cannot generate enough Gmail volume to populate Postmaster, you may be too small for Gmail's filters to have a strong opinion either way.
Reading the Spam Rate Chart
The spam rate chart shows the percentage of your messages to Gmail users that were marked as spam by the recipient, divided by the total messages successfully delivered to the inbox or to the spam folder. It excludes messages that bounced or were blocked at the gateway.
This is the single most important chart in Postmaster. Google uses it as a primary input to filter decisions. The thresholds:
| Spam rate | Status | What it means |
|---|---|---|
| Under 0.10% | Healthy | Inbox placement is sustainable. Continue current practices. |
| 0.10% to 0.30% | Warning zone | Reputation drifting. Tighten list hygiene before it gets worse. |
| Over 0.30% | Failing | Active filtering. Mail moves to spam folder. Reputation drops fast. |
Important quirk: the spam rate is calculated only on mail delivered to active Gmail users. If 1,000 messages reach Gmail and 3 users click "Report spam", your rate is 0.30%. Small samples produce volatile numbers, which is why Google gates the chart behind a volume threshold. A single bad day on a low-volume domain can show 1.5% spam rate that is essentially noise. Look at the 7-day and 30-day trend, not single-day spikes.
When the rate climbs, the cause is almost always list quality or copy. Audit recent campaign launches. Did you import a new list? Did you change subject lines? Did you raise daily volume? In our experience, three out of four spam rate spikes trace back to a single bad list segment or a misjudged subject line.
Reading the IP Reputation Chart
IP reputation reports the reputation of the IP addresses Gmail saw mail from for your domain. The chart bins traffic into four reputation buckets: High, Medium, Low, and Bad. You want as close to 100% High as possible.
- High: Strong sending history. Mail from this IP is trusted.
- Medium: Generally trusted but with some negative signals. Promotions tab is likely.
- Low: Significant negative signals. Most mail goes to spam.
- Bad: Heavy spam complaints or malicious activity. Most mail blocked outright.
If you send through Google Workspace, your IP reputation is shared with Google's outbound infrastructure - it should always show High, and any drop signals a serious problem with Google's shared pool (rare) or a misconfiguration on your end. If you send through SendGrid, Mailgun, Amazon SES, or any third-party ESP, your IP reputation reflects the specific IP or IP pool you are assigned. Dedicated IPs show your individual reputation. Shared IPs show the pool's reputation, which depends on the worst senders in the pool.
If your IP reputation drops to Medium or Low on a shared pool, the fix is usually to switch ESPs or request a different IP pool. On a dedicated IP, the fix is the same work you would do for spam rate: clean the list, fix the copy, reduce volume.
Reading the Domain Reputation Chart
Domain reputation is the most important reputation signal in 2026. Gmail has shifted reputation weighting heavily toward the sending domain rather than the IP, because spammers rotate IPs but rarely rotate trusted domains. The chart uses the same four buckets as IP reputation: High, Medium, Low, Bad.
Domain reputation is Gmail's running score of trustworthiness for your sending domain, calculated from spam complaint rates, engagement signals (opens, replies, archives, deletions without reading), authentication pass rates, and historical sending patterns. It updates daily and reflects the last 30 days of sending behavior weighted toward recent activity.
You want this in High consistently. Medium is workable but means many of your messages will land in Promotions or be deprioritized. Low means most cold email goes to spam. Bad means you need to abandon the domain - reputation recovery from Bad takes 4-8 weeks of perfect behavior, and during that time the domain is essentially dead weight.
Domain reputation moves slowly in both directions. A week of clean sending will not pull you from Low to High. A week of bad sending will not crash you from High to Bad. This is why warm-up matters: you are building a long-term reputation score that takes weeks to establish and weeks to repair.
Reading the Authentication Charts
Postmaster shows three authentication charts: SPF, DKIM, and DMARC. Each one reports the percentage of your traffic that passed the relevant authentication check. The target on all three is 99% or higher.
SPF pass rate: the percentage of mail where the sending IP was authorized by your SPF record. Common reasons for SPF failures: forwarded mail (the forwarding server is not in your SPF), exceeding the 10 DNS lookup limit in your SPF record, or sending from a service you forgot to include.
DKIM pass rate: the percentage of mail with a valid DKIM signature that verified against your published public key. Failures usually mean a misconfigured DKIM selector, a key that was rotated but the DNS record was not updated, or a sending platform that signs with a different domain than your alignment domain.
DMARC pass rate: the percentage of mail that passed DMARC. DMARC passes when either SPF or DKIM aligns with the From domain. This is the most important authentication chart because Google's 2024 requirements specifically demand DMARC alignment. A DMARC pass rate under 95% is a red flag that requires immediate investigation.
One nuance: a high DMARC pass rate combined with a lower SPF or DKIM rate is fine. DMARC only needs one of the two to align. Many setups have SPF break on forwarded mail but DKIM hold strong, producing DMARC pass rates near 100% with SPF rates around 80%. That is acceptable.
Reading Encryption and Delivery Errors
The encryption chart reports the percentage of your outbound mail to Gmail that was sent over TLS. Modern email infrastructure should be at 100% or extremely close. If this drops, you have a transport-level problem with your ESP or MTA. This is rarely an issue for senders using Google Workspace, Microsoft 365, or any reputable ESP.
The delivery errors chart shows what percentage of your messages were rejected at SMTP, and Postmaster breaks down the rejection reasons. Common reasons:
- Rate limited: you sent too fast. Slow your sending cadence per inbox.
- User unknown: the address does not exist. Clean your list with email verification.
- Policy rejection: Gmail's spam filters rejected the message outright. This usually means your domain reputation is failing.
- Suspicious content: the message body triggered content-based filters. Audit the copy.
A healthy domain shows delivery errors under 2% with most errors being "user unknown" from list decay rather than policy rejections.
Thresholds Cheat Sheet
| Signal | Healthy | Warning | Failing |
|---|---|---|---|
| Spam rate | Under 0.10% | 0.10% to 0.30% | Over 0.30% |
| Domain reputation | High | Medium | Low or Bad |
| IP reputation | High | Medium | Low or Bad |
| SPF pass | 99%+ | 90-99% | Under 90% |
| DKIM pass | 99%+ | 95-99% | Under 95% |
| DMARC pass | 99%+ | 95-99% | Under 95% |
| Encryption (TLS) | 99%+ | 95-99% | Under 95% |
| Delivery errors | Under 2% | 2-5% | Over 5% |
What to Do When the Numbers Move
Postmaster is only useful if you act on it. Here is the response playbook for the three scenarios that matter most.
When spam rate spikes above 0.10%: pause new campaign launches, identify which segment or template was active in the past 48 hours, remove the segment from rotation, and reduce daily volume per inbox by 30-50% until the rate returns to baseline.
When domain reputation drops from High to Medium: stop sending to that domain for 5-7 days. Run warm-up traffic only. Audit list quality - bounce rates over 5% will drag reputation down. Resume at half your previous volume and increase 20% per week.
When DMARC pass rate falls under 95%: this is almost always a misconfiguration, not a list problem. Check that your DKIM selector matches the record published in DNS, that your SPF record is under 10 DNS lookups, and that your From domain aligns with your DKIM signing domain.
The Limits of Postmaster Tools
Postmaster has blind spots you should know about. It only covers Gmail. Outlook, Yahoo, Apple Mail, and corporate domains do not show up - you need separate monitoring (Microsoft has SNDS for Outlook, Yahoo has CFL for complaint feedback, the rest you monitor via seed list testing).
Postmaster also reports on aggregated data, not per-campaign or per-mailbox. If you send from 8 inboxes on one domain, the dashboard shows the combined picture - one bad inbox can drag down the whole domain's reported reputation without you knowing which inbox caused it. Combining Postmaster with mailbox-level engagement tracking is how you isolate problems.
And the 1-2 day lag means you are always reacting to yesterday's mail. By the time spam rate spikes show up in the dashboard, you have already sent another 24 hours of campaigns. The right operating posture is to treat Postmaster as a trailing indicator and pair it with real-time engagement metrics (reply rates, bounce rates, complaint rates from your ESP) as leading indicators.
How ACA Pulls Postmaster Into Its Dashboard
ACA connects to Google Postmaster Tools through Google's API so you do not have to log into postmaster.google.com manually for every domain. The platform pulls daily snapshots of spam rate, domain reputation, IP reputation, and authentication pass rates for every sending domain in your workspace and surfaces them inside the deliverability panel.
For agencies running outreach across multiple clients, this matters because each client typically has 3-6 secondary domains. Manually checking 20+ Postmaster dashboards every morning is not realistic. ACA aggregates them, flags any domain that crosses a threshold (spam rate over 0.10%, reputation drop, DMARC pass under 95%), and links the alert directly to the campaign and inbox combination that was active when the metric moved.
The other piece is correlation. When domain reputation drops, you want to know which campaign triggered it. ACA timestamps Postmaster data against the outbound activity log, so the dashboard can answer questions like "which campaign was running when spam rate doubled" without manual cross-referencing. This is the difference between knowing you have a deliverability problem and knowing what to do about it.
Postmaster is the foundation, but it is not the whole picture. To send cold email that consistently reaches the inbox in 2026, you also need the upstream work: secondary domains, proper warm-up, list hygiene, and multi-channel sequences that reduce email volume per prospect. Postmaster tells you whether the work is paying off.
Frequently Asked Questions
How long does it take for Postmaster Tools to show data?
Verification takes 5-30 minutes after you add the TXT record. Charts begin populating 24-48 hours after verification, assuming you send enough volume to Gmail recipients (a few hundred messages per day minimum). Domains sending under that threshold will see "Not enough data" on most charts indefinitely - Google requires a minimum volume to anonymize data before showing it.
What is a good spam rate in Google Postmaster Tools?
Under 0.10% is healthy. Between 0.10% and 0.30% is a warning zone where reputation is starting to drift. Over 0.30% triggers active filtering and most mail will land in spam. Google's documented threshold for sender requirements is 0.30%, but you want to stay well under it because rate calculations on smaller samples are volatile and you need headroom.
Why does my Postmaster Tools dashboard say "Not enough data"?
Google gates the charts behind a minimum volume threshold to protect user privacy through anonymization. You need consistent daily volume to Gmail recipients - typically several hundred messages per day - before charts populate. If you send under that threshold, the dashboard will remain mostly empty even after verification. This is itself a signal: low-volume senders are largely invisible to Gmail's reputation system, which has both upsides (less scrutiny) and downsides (no early-warning data).
Does Postmaster Tools work for cold email?
Yes. Postmaster works the same for any sending domain regardless of whether the recipient opted in or not. The distinction Gmail cares about is recipient behavior: do users open, reply, archive, or mark as spam. Cold email programs that send to well-targeted prospects with relevant offers and clean lists typically maintain spam rates under 0.10% and High domain reputation. Cold email programs that blast cold lists with generic copy tend to land in the 0.30%+ failure zone quickly.
What is the difference between domain reputation and IP reputation?
Domain reputation tracks the trustworthiness of your sending domain (the DKIM signing domain). It moves slowly and is the primary reputation signal Gmail uses in 2026. IP reputation tracks the IP address that delivered the mail. For Google Workspace senders, IP reputation is shared with Google's outbound pool and should always be High. For third-party ESP senders, IP reputation depends on the dedicated or shared IP pool you use. Domain reputation is the more important number to optimize because spammers can rotate IPs but trusted domains take weeks to build.
Can I use Postmaster Tools if I send through Google Workspace?
Yes. Postmaster works for any domain regardless of which ESP delivers the mail. If you send through Google Workspace, your IP reputation will reflect Google's shared outbound pool (it should always show High), while your domain reputation is specific to your domain and reflects your actual sending behavior. Add Postmaster verification for every domain you send cold email from, including all your secondary outreach domains.
What is one-click unsubscribe and is it required?
One-click unsubscribe (RFC 8058) is a header-based unsubscribe mechanism that lets recipients opt out without opening a browser or clicking through a confirmation page. Google's 2024 sender requirements mandate it for bulk senders (over 5,000 messages per day to Gmail). For cold email at scale, implementing one-click unsubscribe via the List-Unsubscribe and List-Unsubscribe-Post headers is now table stakes. Most modern outreach platforms handle this automatically.