Office 365 SMTP Settings: Port 587, TLS, and Authentication

Office 365 SMTP Settings: Port 587, TLS, and Authentication

Author
Adam Henshall
Reviewed by
Vladyslav Podoliako
Published
Sep 16, 2026
Reading duration
10 min

Your outbound team is built on email. Every message sent is a direct investment in pipeline. Yet too many B2B growth leaders treat their email infrastructure like an afterthought.

They assume configuring Office 365 SMTP settings is a one-and-done task - a technical detail easily checked off. They're wrong.

Getting your O365 SMTP setup right is non-negotiable. But it's only the first step. Inbox placement and ROI demand a much larger, ongoing battle.

Neglected deliverability costs more than a few emails hitting spam. It costs missed meetings, deflated reply rates, wasted SDR effort, and a pipeline that consistently underperforms.

Acquisition costs vary by segment, offer, channel mix, and measurement window; use an approved, dated source for any benchmark.

In this Folderly article, we'll cover:

  • Office 365 SMTP: Why Basic Setup Falls Short

  • The Cost of Neglecting Office 365 SMTP for Outbound Teams

  • Configuring Office 365 SMTP Settings: A Step-by-Step Guide

  • Common Deliverability Mistakes Beyond Office 365 Configuration

  • Beyond Configuration: When Deliverability Becomes an Infrastructure Challenge

  • How Folderly's Platform Optimizes Deliverability Beyond SMTP Settings

  • Conclusion

Office 365 SMTP: Why Basic Setup Falls Short

For Microsoft 365 client SMTP submission, use smtp.office365.com with port 587 and TLS/STARTTLS. Microsoft recommends Modern Authentication (OAuth); SMTP AUTH may be disabled at the organization or mailbox level and should be enabled only for a mailbox that still requires it. See Microsoft's client-submission guidance.

For B2B outbound teams, this is merely table stakes. Reliable sending, especially at scale, demands continuous management of your domain's health, sender reputation, and adherence to evolving ESP requirements.

The settings themselves are foundational. But they won't prevent your campaigns from crumbling without an infrastructure-first approach.

The Cost of Neglecting Office 365 SMTP for Outbound Teams

For B2B SaaS, every cold email is a potential revenue conversation. When your emails consistently hit spam, you lose individual messages. Poor delivery signals can warrant investigation, but the effect depends on the sender, message, list, sending pattern, and receiving provider.

This creates a vicious cycle where your team works harder for diminishing returns.

  • Pipeline Attrition: Emails stuck in spam can't generate replies, meetings, or closed-won deals. It's a direct leak in your pipeline.

  • Wasted Resources: Your SDRs, content writers, and prospect research teams are pouring effort into messages that never reach their destination. That's a direct hit to your efficiency.

  • Scaling Headaches: As you add more mailboxes and increase volume, a shaky deliverability foundation will buckle. What worked for 10 mailboxes won't for 50, leading to a scaling ceiling for your outbound efforts.

Relying on basic O365 settings alone, or temporary fixes often mislabeled as 'warm-up', is like building a skyscraper on a foundation of sand.

Temporary fixes may not address the underlying sending and provider factors; evaluate their effect with your own data.

Configuring Office 365 SMTP Settings: A Step-by-Step Guide

These are the core settings you need to configure for your Office 365 mailboxes. Ensure each step is followed meticulously:

1. Check SMTP AUTH and authentication method

SMTP AUTH can be disabled by organization policy or security defaults. Check the designated mailbox's setting only if your chosen client-submission flow requires it; Microsoft recommends Modern Authentication (OAuth), and a different supported sending method may be needed when SMTP AUTH is disabled.

  • Go to the Microsoft 365 admin center.

  • Navigate to Users > Active users.

  • Select the user account you want to configure.

  • In the user flyout pane, click Mail.

  • Under Email apps, select Manage email apps.

  • Verify whether Authenticated SMTP is enabled for the designated mailbox. Enable it only when required by the chosen flow and approved by the tenant's security policy; otherwise use Modern Auth/OAuth or another supported method.

2. Configure SMTP Server Details

Use these Microsoft 365 client-submission settings in your outbound sequencing tool or application:

  • SMTP Server Address: smtp.office365.com

  • Port: 587 (recommended; Microsoft also documents port 25 for client submission where appropriate)

  • Transport security: TLS 1.2/1.3 with STARTTLS

  • Authentication: Modern Authentication/OAuth is recommended. If using SMTP AUTH, verify that it is enabled for the designated mailbox; do not assume a basic username/password path is available.

3. Essential DNS Records for Office 365 Deliverability: SPF, DKIM, DMARC

These are critical for telling receiving mail servers that emails from your domain are legitimate.

Without correct records, authentication may fail or delivery may be affected; assess the provider's response rather than infer a universal inbox outcome.

  • SPF (Sender Policy Framework): A TXT record that lists authorized servers to send email on behalf of your domain. Your SPF record should include include:spf.protection.outlook.com.

  • DKIM (DomainKeys Identified Mail): Adds a digital signature to your outbound messages. Microsoft 365 automatically sets up DKIM for your initial .onmicrosoft.com domain, but you need to manually enable it for your custom domains.

  • DMARC (Domain-based Message Authentication, Reporting, and Conformance): Builds on SPF and DKIM, telling receiving servers what to do with emails that fail authentication (e.g., quarantine, reject). A DMARC record is a TXT record that should be added to your DNS.

Pro Tip: Setting up these DNS records is complex and often overlooked. Errors here can contribute to delivery or filtering problems; receiving-provider treatment varies.

These records help receiving providers evaluate authentication; inspect provider feedback rather than infer a universal outcome.

Receiving-provider treatment varies: messages may be rejected, quarantined, or filtered, so investigate provider feedback separately.

Delivery outcomes depend on provider policy and account signals; use provider feedback to diagnose the issue.

Common Deliverability Mistakes Beyond Office 365 Configuration

Even with perfect O365 SMTP settings, teams routinely make mistakes that tank their deliverability:

  • Ignoring List Quality: Sending to invalid, old, or unengaged email addresses is a fast track to ruin your sender reputation. High bounce rates and spam complaints are immediate red flags for ESPs.

  • Volume Spikes: Sudden changes in volume may contribute to delivery or filtering problems; receiving-provider treatment varies, so investigate provider feedback separately.

  • Generic Content: Overly promotional, repetitive, or poorly personalized content screams 'spam'. Even with perfect settings, bad content lands in junk.

  • Lack of Monitoring: No ongoing visibility into inbox placement, domain health, or blacklists means you only discover a problem when your pipeline is already suffering.

Beyond Configuration: When Deliverability Becomes an Infrastructure Challenge

You've checked all the boxes. Your O365 SMTP settings are pristine, SPF, DKIM, and DMARC are configured.

Yet, your emails are still landing in spam. This is where the problem shifts from basic configuration to the underlying infrastructure that governs your sender reputation.

Deliverability is a dynamic, ongoing challenge - not a one-time setup. Gmail and Microsoft constantly update their algorithms.

Your sender reputation is a living score, influenced by every email you send, every bounce, every reply, and every spam complaint. Things like:

  • IP reputation (even shared IPs can be an issue)

  • Domain age and history

  • Consistency of sending patterns

  • Engagement rates (opens, replies)

  • Spam trap hits

These factors are complex and require continuous oversight.

Relying on basic settings or the myth of 'warm-up' as a fix for these deeper infrastructure challenges will inevitably lead to declining campaign ROI as you scale.

'Warm-up' might temporarily boost early delivery rates, but it crumbles when campaigns mature and require sustained performance.

How Folderly's Platform Optimizes Deliverability Beyond SMTP Settings

At Folderly, we understand your Office 365 SMTP settings are only the first step.

We provide the email deliverability platform for B2B outbound teams that manages the infrastructure layer. Inbox placement still depends on the account, message, list, sending pattern, and receiving-provider decisions.

  • Continuous Infrastructure Management: Folderly describes monitoring and optimization of DNS, SPF, DKIM, DMARC, and domain health. Discuss the current scope with the team and assess outcomes using your own sending data.

  • Dedicated Deliverability Specialist: A named specialist can help diagnose issues and coordinate remediation; outcomes vary by account, sending pattern, and receiving-provider decisions.

  • Precision Email Validation: Folderly describes checks beyond syntax in its current product materials. Validation does not guarantee that an address will accept a message or that a message will reach the inbox.

  • Real-time Diagnostics & Monitoring: Folderly describes diagnostics and monitoring capabilities; use diagnostics alongside the feedback available from your mailbox provider.

Any Folderly performance example should be treated as a dated, cohort-specific case-study result with a defined method and window. Check the method, measurement window, and starting conditions before comparing a case study with your own program. No universal recovery or open-rate benchmark is established here.

Conclusion

Configuring your Office 365 SMTP settings correctly is a critical first step for any B2B outbound team.

But don't mistake it for the finish line. True deliverability for scaling growth teams is an ongoing infrastructure challenge that demands continuous management, expert oversight, and precise tools.

Use the current Microsoft settings as a starting point, then validate authentication, list quality, sending patterns, and provider feedback against your own data.

Frequently Asked Questions

What are the essential Office 365 SMTP settings?

For Microsoft 365 client submission, use smtp.office365.com with port 587 and TLS/STARTTLS. Prefer Modern Authentication/OAuth; if SMTP AUTH is required, verify the tenant and designated-mailbox settings instead of assuming a basic password path.

Why are SPF, DKIM, and DMARC crucial for Office 365 email deliverability?

These DNS records help receiving providers evaluate authentication. Missing or incorrect records may contribute to rejection, quarantine, or spam placement depending on provider policy; inspect provider feedback.

Can correct Office 365 SMTP settings alone guarantee inbox delivery for cold email campaigns?

No. While foundational, correct SMTP settings are only the beginning. Consistent inbox placement for B2B outbound campaigns, especially at scale, requires ongoing management of your domain's health, sender reputation, email content, and adaptation to evolving email service provider (ESP) algorithms.

What are common reasons Office 365 emails still go to spam even with proper settings?

Beyond configuration, issues like poor list quality, sending to unengaged contacts, sudden increases in email volume, overly generic or salesy content, and neglecting continuous monitoring of your domain's health can severely impact deliverability.

How can I ensure long-term email deliverability for my B2B outbound team using Office 365?

Support sustained deliverability by monitoring authentication, list quality, sending patterns, and provider feedback. Assess any platform against the specific problems your data reveals.

Adam Henshall
Author:
Adam Henshall
GTM at Folderly
Adam is our full stack growth leader based in Manchester, UK. He has led marketing at a range of US SaaS firms and he has a cat called Mario. He's learning Korean.

Also you may like