How to send cold email in 2026: the complete setup guide

Last reviewed: October 27, 2026.

The short answer

Cold email in 2026 works when the infrastructure is boring and the message is relevant. The setup that EmailPal recommends:

One domain with 5 inboxes sends about 75 cold emails a day. Ten domains send 750 a day, which is exactly what the Starter plan's 50 mailboxes cover.

If you need to send this week, skip steps 1 to 3 by leasing pre-warmed inboxes ($3 per inbox per month, 15 cold emails a day from the first day).

The timeline

Step 1: Get a domain

Send cold email from a secondary domain, not your company domain. If outreach goes badly, acme.com keeps delivering password resets and customer mail. Names like getacme.com, tryacme.com or acmehq.com work. Avoid "mail", "outreach" or "blast" in the name, because those strings mark you as a bulk sender before anyone reads a word. Secondary sending domains for cold email.

Register through EmailPal

1. Open Domains and search for the name.
2. Pick an extension. Only .com, .org, .net and .co are offered, because cold email inboxes worse on niche extensions. Prices start at $10 (.org $10, .com $13, .net $15, .co $18), shown exactly at checkout and paid once from your prepaid domain balance, then renewed yearly.
3. Confirm. EmailPal writes SPF, dual DKIM (RSA-2048 and Ed25519), DMARC at p=reject and MX, then re-checks them on public resolvers.
4. Wait until the domain shows DNS green. This takes minutes.

Bring a domain you already own. Free, up to your plan's domain slots. Point its nameservers at EmailPal first. Failing to do that is the most common reason DNS stays red. Bring your own domain, Register a domain.

How many domains you need is simple arithmetic:

Step 2: Provision the inboxes

1. Open Mailboxes and choose new.
2. Pick the domain (its DNS must be verified).
3. Pick a naming pattern (first, first.last, firstlast, flast) and a count. Use 5. The form only warns past about 10 per domain, but providers correlate mailboxes on the same domain, so one inbox earning complaints hurts its siblings.
4. Confirm. Mailboxes inside your plan allowance are included, and extras cost $1 per month each.
5. When the job finishes, SMTP and IMAP credentials are on each mailbox.

Starter includes 50 mailboxes and 50 domain slots, Growth 200 and 200, Scale 600 and 600. Over the API: POST /api/public/v1/mailboxes. Create mailboxes, How many mailboxes per domain?.

Send from the built-in sequencer (Engage), or export the SMTP and IMAP credentials into Instantly, Smartlead or Plusvibe. SMTP and IMAP credentials.

Step 3: Warm for at least 2 weeks, and keep warming on

A new mailbox has no sending history, and inbox providers treat unknown senders with suspicion. Warming builds that history with real conversations against inboxes at Gmail, Outlook and Yahoo.

Our recommendation:

• 5 inboxes per domain, 15 cold emails per inbox per day. That is about 75 a day per domain.
• Warm for at least 14 days before the first cold email. The standard profile starts around 2 messages a day and reaches its ceiling after about 14 days. The mailbox is flagged campaign-ready then.
• Keep warming on after you launch. Warming messages (up to about 20 a day per inbox) are separate from your 15 cold emails and never use that allowance.
• Turn it on at creation. Open Warming, select the inboxes and choose Turn warming on. It costs $0.60 per inbox per month. Pausing resets progress.

EmailPal does not lock you out of sending while a mailbox warms. Campaign-ready is a flag and the inbox rate is a measurement, and both are advice. Launching early spends reputation you have not built yet. When is a mailbox ready to send?, Email warming by EmailPal, and the full warm-up guide.

Step 4: Verify the list

List quality is the fastest way to ruin a warmed mailbox. A 4% bounce rate undoes warming, and Gmail and Microsoft score you on what happens after the ramp. EmailPal protects you at three levels, which is also the target to stay under:

How to verify

1. Open List check, then upload a CSV or paste addresses. Leads from Prospects are third-party data, so export that list and run it through here too.
2. EmailPal asks the receiving server about a mailbox that cannot exist, then about your contact. If the fake one is accepted, the domain is a catch-all, and your contact is not called safe. Nothing is delivered (RCPT TO only).
3. Read the verdicts. Safe and role addresses are confirmed inboxes. Catch-all is risky, unknown means the server would not say, and invalid, disabled, disposable and inbox-full rows should be dropped.
4. Press Use results, choose Safe + role, and download the CSV, save a contact list or add the addresses to a campaign.

Daily checks: Starter 500, Growth 1,500, Scale 4,500, shared by uploads, the API (POST /api/public/v1/verify) and the verify_list MCP tool. Campaigns skip Unknown addresses by default, and EmailPal never sends campaign mail to personal Microsoft mailboxes (outlook, hotmail, live, msn). How to verify an email list before sending, Verification verdicts.

Step 5: Build the sequence and personalize it

Create the campaign in Engage. A sequence has up to 10 steps, each with up to 6 A/B variants. A new step waits 2 days by default. Create a campaign, Steps, waits and A/B variants.

A structure that works

1. Email 1: who you are in one line, one observation about them, one offer, one low-friction question. About 80 to 100 words or fewer.
2. Email 2 (2 to 3 days later): a short bump with one new fact or proof point.
3. Email 3 (3 to 4 days later): a different angle on the same problem.
4. Email 4 (optional): a polite close that gives them an easy way to say no.

Rules EmailPal's launch check enforces: an unsubscribe link in the first email, your business mailing address in the footer, no link shorteners, and no prohibited content. Open tracking is not offered, and click tracking is optional (leave it off for the first emails). Send plain text. Pal, EmailPal's AI agent, can draft the sequence, and you approve it before launch.

How personalization works

Relevance beats research. The opener that lifts replies is a real observation from the prospect's own business that points at the problem your offer solves. Compliments ("loved your blog post") do not. The variables you can use:

• {{firstName | there}} merge fields with a fallback, so a missing value never sends blank.
• Any custom column from your list as {{fieldname}}.
• Personalization, the researched opening line. You select which leads to personalize, and nothing runs automatically. For each selected lead EmailPal reads the homepage plus up to three relevant pages of their website, keeps only facts whose exact quote appears on the page, writes one sentence for email 1, and a separate reviewer rejects flattery, guesses and generic lines. If nothing specific is found, the line is left out and the email reads normally. Each line shows its source quote and can be edited, regenerated or removed. Included monthly: Starter 1,000, Growth 2,500, Scale 5,000. Personalization.

A wrong or invented personal detail costs more than none, because it is a complaint waiting to happen.

Step 6: Launch and watch the first week

The Ready to launch? checklist blocks on missing basics and warns on spam wording, more than 3 links, unverified leads and mailboxes that are still warming. Launch, then read these numbers:

Do not use open rate. Bot and privacy-proxy opens inflate it, which is why EmailPal does not offer open tracking.

Step 7: What reply rates to expect in 2026

Published reply rates vary by up to about 8 times depending on how a "reply" is counted, so compare like with like.

What that means in practice: 1,000 emails produce about 7 replies at the median and about 26 at the top 10%. Those include negative replies, so positive replies and meetings are a fraction of that. Targeting moves the number more than copy does. In Belkins' data, companies with 0 to 10 employees replied at 0.72% against 0.22% for 10,000+, and the offer is the thing practitioners most often credit for the spread.

Track positive replies per 1,000 emails sent, not opens.

Words and patterns to avoid

EmailPal's launch check warns on these spam phrases. Remove them from every step and subject line:

Patterns that hurt as much as words:

• Subjects that start with "Re:" or "Fwd:". They read as fake replies.
• ALL CAPS, three or more exclamation marks, or repeated $ signs.
• More than 3 links, any link shortener, bare-IP links, attachments and heavy HTML.
• A tracking pixel and a click-tracked link in the first email.
• Templated openers that fit any recipient: "I noticed", "impressed by", "congrats on", "love what you're doing", "hope this finds you well". If the sentence still reads correctly with a competitor's name swapped in, it is generic.
• Spintax as a deliverability fix. Gmail's classifier sees through surface variation, so rewording does not buy placement.

EmailPal also blocks a launch on prohibited content such as get-rich schemes, credit repair and loan offers, adult content and account-phishing wording.

FAQs

How many cold emails can I send per day?

15 per inbox is recommended and 100 per inbox is the hard cap. With 5 inboxes per domain, one domain sends about 75 a day. For more volume, add domains and inboxes instead of raising the per-inbox number.

How long should I warm a new domain before cold emailing?

At least 14 days. EmailPal flags a mailbox campaign-ready after 14 days of warming and shows the measured inbox rate beside it. Aged domains can use the accelerated profile (about 7 days to the ceiling), but the flag is still set at 14 days.

Do I need Google Workspace or Microsoft 365?

No. EmailPal hosts the mailboxes and gives you SMTP and IMAP credentials. You can also connect your own Google Workspace or Gmail mailboxes with an app password and warm them for $0.60 per inbox per month. Microsoft 365 and Outlook mailboxes cannot be connected.

Do I need a separate sequencer?

No. Engage, the built-in sequencer, is included on every plan, along with the Unibox shared inbox and a CRM. You can also use Instantly, Smartlead or Plusvibe over SMTP and IMAP.

Should I turn on open tracking?

No. Open rates are inflated by bots and privacy proxies and are not evidence of placement. EmailPal's sequencer does not offer open tracking.

Is cold email legal?

Rules depend on where you and your recipients are. In the United States, CAN-SPAM requires a physical address and a working unsubscribe, and EmailPal enforces both before launch. This is not legal advice, so check the rules for your recipients' countries.

What is a good reply rate?

Above 0.74% is better than the median sender, and above 2.63% is in the top 10%, on Smartlead's 2026 data. Below 1% with good targeting usually points to a deliverability problem.

What if my emails land in spam?

Stop adding volume, then follow Why cold emails land in spam.

Need more help?

Getting started with EmailPal, Campaign launch checklist, or open a ticket.