How to Warm Up Cold Email Inboxes (2026 Playbook)
To warm up a cold email inbox: get SPF, DKIM and DMARC passing first, let the domain sit for 7–14 days, then connect each mailbox to the warmup pool inside your sending tool (Instantly, Smartlead, ReachInbox). Start at 2–4 warmup emails per day and add 2–3 per day until you reach 20–40. Plan on roughly three to four weeks before that mailbox sends its first real cold campaign, and leave warmup running permanently at reduced volume underneath live sending.
That is the short version. The rest of this article covers what warmup actually changes, which settings matter, how to tell whether it worked, and what warmup cannot fix. If you are setting up infrastructure for the first time, read the prerequisites section before you touch a warmup toggle. Warming up a mailbox with broken authentication only teaches mailbox providers that a broken sender is sending consistently.
What does warming up an inbox actually do?
A brand-new domain and mailbox have no history. When Gmail or Microsoft 365 receives mail from a sender they have never seen, they have nothing to weigh except the message itself and the authentication attached to it. A sender that appears out of nowhere and immediately sends 200 near-identical messages to strangers who do not reply looks exactly like the pattern filters are built to catch.
Warmup addresses three things:
- Sending history. It establishes a gradual, consistent volume curve instead of a cold start at full throttle.
- Engagement signals. Warmup network messages get opened, replied to, marked "not spam," and moved out of Promotions. Those are the behaviours mailbox providers read as "recipients want this sender."
- Folder placement recovery. Most warmup tools detect when a warmup message lands in spam and pull it back to the inbox, which is a meaningful corrective signal early on.
What warmup does not do: fix a bad list, rescue spammy copy, compensate for a missing DMARC record, or make a burned domain usable again. It sets a floor and nothing above it.
What has to be true before you start warmup?
Run this checklist before day one. Every item here is checkable in a few minutes, and fixing any of them mid-warmup wastes the days you already spent.
- SPF: one SPF record on the sending domain, with your provider included (
include:_spf.google.comorinclude:spf.protection.outlook.com) and~allat the end. Two SPF records is a hard fail. - DKIM: generated and published, 2048-bit. In Google Workspace, DKIM is not on by default. You have to generate the key in Admin console and then click "Start authentication." A lot of "warmed" mailboxes have been sending unsigned for weeks.
- DMARC: start at
v=DMARC1; p=none; rua=mailto:[email protected].p=noneis the right starting posture. Move toquarantineonce your aggregate reports are clean. A missing DMARC record now counts against you at both Google and Microsoft for higher-volume senders. - MX records: pointed at the mailbox provider, so the domain can actually receive replies. A cold domain that cannot receive mail is a broken domain.
- The root domain resolves. Point it at a real page, or 301 it to your main site. Recipients and filters both check.
- Custom tracking domain: if you are going to use open tracking at all, set up a CNAME-based tracking domain. Shared tracking domains are shared reputation. Better still on cold: turn open tracking off entirely and measure replies.
- A real mailbox identity: display name, signature, profile photo, and an opt-out line in your live templates.
Verify by sending one message from the new mailbox to a personal Gmail account, then opening Show original. You want SPF: PASS, DKIM: PASS, DMARC: PASS. If any line says anything else, stop and fix it.
Does it matter where the mailboxes come from?
Yes, in two ways.
First, authorization. Resold mailboxes that sit inside someone else's tenant, or that are provisioned through unauthorized channels, can be suspended without warning. When they go, your warmup history, your domain and your live sequences go with them. You want mailboxes you own outright, with admin console access, so you can rotate DKIM keys, adjust routing, add aliases and export data yourself.
Second, provisioning quality. Most warmup failures we see are not warmup failures at all; they are DNS failures discovered three weeks late. Having SPF, DKIM and DMARC written correctly at provisioning time removes the single most common cause.
This is what Inboxlogy does: authorized Google Workspace and Microsoft 365 mailboxes on dedicated US/EU IPs, with SPF, DKIM and DMARC configured automatically, 100% ownership and full admin access, plus an API for provisioning at scale, from $2.80 per mailbox per month, no setup fee, monthly. To be explicit about the division of labour: Inboxlogy does not run warmup. Warmup runs in whatever sending tool you connect the mailboxes to, whether that is Instantly, Smartlead or ReachInbox. Infrastructure and warmup are two different jobs, and any provider claiming to do both from one panel is worth a second look.
How long does warming up a cold email inbox take?
Budget three to four weeks from first warmup email to first real campaign, plus 7–14 days of domain age before that. So from domain purchase to live sending: roughly four to six weeks.
Shorter is possible, but you pay for it later. Two common accelerants and their real costs:
- Aged domains. Buying a domain with history removes the "registered last Tuesday" signal, but you inherit whatever that domain did before. Check it in archive services and blocklist lookups before you buy.
- Two-week ramps. Workable if your first campaign volume is genuinely low (10–15/day per mailbox) and your list is tightly targeted. Not workable if you plan to open at 40/day.
Your timeline is set by the gap between warmup volume and campaign volume, not by the calendar. A mailbox sending 30 warmup emails a day that suddenly adds 30 cold emails on top doubles its output overnight. Ramp campaign volume too.
What warmup settings should I use, week by week?
Settings names differ slightly between tools, but the levers are the same. Per mailbox:
- Days 1–7: start at 2–4 emails/day, increase by 2 per day. Reply rate 25–35%. Match weekends to your real pattern. If you will send Mon–Fri, warm Mon–Fri; an inbox that only works weekdays reads as more human, not less.
- Days 8–14: ramp to 12–20/day. Keep reply rate at 30%. Turn on spam-folder rescue if it is optional in your tool.
- Days 15–21: ramp to 25–35/day and hold there. The point of the plateau is steady, boring consistency.
- Days 22–28: hold warmup volume, and start real campaigns at 5–10 emails/day per mailbox, adding about 5/day per week.
- Ongoing: reduce warmup to 10–20/day and leave it running forever. When you pause campaigns for a week, warmup keeps the mailbox from going dark and then spiking on return.
Two settings people get wrong:
Reply rate. Higher is not better. A mailbox with a 70% reply rate in a warmup network has an engagement profile no real cold sender has ever had. 25–35% is plausible, and it is roughly the range the major tools default to.
Warmup filters and labels. Let the tool file warmup mail under its own label or folder, but do not auto-delete it. Some tools need the thread to persist to continue the conversation, and an inbox with zero stored mail is its own anomaly.
How many emails per day can a warmed-up mailbox actually send?
Provider limits and safe cold-email limits are very different numbers, and conflating them is the most expensive mistake in this process.
- Google Workspace permits up to 2,000 external recipients per day per user. Safe cold-outreach volume: 20–40/day.
- Microsoft 365 permits 10,000 recipients per day with a 30-messages-per-minute cap. Safe cold-outreach volume: 20–40/day.
The provider limit tells you when your mail will be rejected. It tells you nothing about when your mail will be filtered. Scale by adding mailboxes and domains rather than pushing a single mailbox toward its ceiling. A typical structure is 1–3 mailboxes per secondary domain, each warmed independently, never your primary company domain.
If you need 1,000 cold emails a day, that is roughly 25–50 mailboxes across 10–20 domains. Per-mailbox cost and provisioning speed matter at that scale, and API provisioning beats clicking through admin consoles for the fortieth time.
How do I know if warmup is working?
The warmup score inside your sending tool is the least useful signal available, because it primarily measures placement within the warmup network: other cold email senders' mailboxes, which are unusually forgiving. Treat it as a smoke alarm. A falling score means something is wrong; a high score does not mean anything is right.
Better checks, in order of usefulness:
- Seed/placement tests. Tools like GlockApps or MailReach send your actual campaign copy to a spread of real Gmail, Outlook, Yahoo and corporate seed accounts and report Inbox vs Promotions vs Spam per provider. Run one with your real first-touch template rather than a generic test message, before launching, and again after your first week live.
- Manual inbox check. Send your live template to your own Gmail, Outlook.com, and a corporate Microsoft 365 account you control. Primary or Promotions? Any "Be careful with this message" banner?
- Reply rate on live sends. The only metric that ultimately matters. A sudden drop in replies with no copy change usually means placement, not messaging.
- Bounce rate. Keep it under 2%. Above 3–5%, stop sending and re-verify your list. High bounce rates damage reputation faster than almost anything else on this list.
- Spam complaints. Google's published bulk-sender guidance sets 0.3% as the rate to stay under and 0.1% as the target to sit below. Those thresholds are a reasonable benchmark even at lower volume.
One expectation to set correctly: Google Postmaster Tools will probably show you nothing. Its domain reputation charts need meaningful daily volume to Gmail before they populate, and properly-run cold email operations spread across many domains rarely reach it on any single domain. Postmaster simply is not your instrument here. Microsoft SNDS is IP-based, so it does not apply to mail sent through Microsoft 365 or Google Workspace mailboxes either.
Does automated warmup still work in 2026?
It works, but less than it did and less than vendors imply.
Warmup networks are artificial engagement, and mailbox providers have gotten measurably better at recognising reciprocal-sending patterns between accounts that never interact with anyone else. Google's and Microsoft's bulk-sender requirements (authentication, one-click unsubscribe, complaint-rate thresholds) moved the emphasis toward things warmup cannot simulate: authentication that actually passes, and recipients who actually want the mail.
So treat warmup as the cold-start solution it is. It solves "this domain has no history." It does not solve "this domain's recipients don't reply." Once you are live, real engagement from real prospects becomes the dominant signal, so your targeting and your copy are your deliverability strategy. Teams that treat warmup as a permanent substitute for list quality rotate through burned domains every quarter and blame the warmup tool.
What kills a warmup?
- Launching at full volume on day 1 of campaigns. The most common cause of a mailbox that "was fine in warmup, then died."
- Unverified lists. Bounces are an immediate, unambiguous negative signal. Verify every list, every time.
- Links and images in the first touch. Plain text, no images, at most one link, ideally zero on the first email.
- Identical copy across every mailbox. If 30 mailboxes send byte-identical messages, they are one sender wearing 30 hats. Vary genuinely, not with spintax that produces nonsense.
- Changing DNS mid-warmup. Rotating DKIM keys or editing SPF resets part of what you have built. Get it right first.
- Pausing for weeks, then resuming at full volume. Keep warmup running through quiet periods.
- Using your primary domain. If your company domain gets filtered, your invoices, contracts and support replies get filtered too. Always use lookalike secondary domains.
How do I warm up an inbox without a warmup tool?
Manual warmup is slower and lower-volume, but the engagement is genuine, and genuine engagement is worth more per message than network engagement. For a small number of high-value mailboxes, it is a reasonable approach:
- Have 10–15 colleagues, friends and clients send the new address a real message, and reply to every one. Replies from your mailbox count more than receipts.
- Ask two or three of them to move a message to Primary and mark it "Not spam."
- Subscribe the address to a handful of legitimate newsletters and industry lists, and open them.
- Use the address for ordinary business mail such as scheduling, vendor questions and account signups for a couple of weeks.
- Then begin cold sending at 5/day and ramp as above.
Most teams running more than a few mailboxes end up combining both: automated warmup for the volume curve, plus a handful of real conversations per mailbox in week one.
What do I do if the mailbox is already landing in spam?
Work in this order, and change one thing at a time:
- Stop campaigns. Leave warmup running. Continuing to send while you diagnose deepens the problem.
- Re-verify authentication. Send to a personal Gmail and check Show original. This catches a surprising share of cases on its own.
- Check blocklists for the domain (Spamhaus and similar). Delist where a legitimate process exists.
- Audit the copy. Remove images, tracking pixels, link shorteners and all but one link. Shorten the message. Replace anything that reads like a template.
- Audit the list. If your bounce rate was above 3%, that is very likely the cause rather than your warmup settings.
- Re-ramp. Resume at 5/day for a week, then step back up.
- Know when to retire a domain. If placement does not recover after two to three weeks of clean sending, the domain is not worth more of your time. Retire it and start a fresh secondary domain. That is the underlying argument for keeping secondary domains cheap, separate and disposable, and your primary domain out of the blast radius.
Frequently asked questions
How long should I warm up a new cold email inbox?
Three to four weeks of warmup before the first campaign, after letting the domain age 7–14 days post-registration. Then keep warmup running indefinitely at 10–20 emails per day underneath live sending, rather than switching it off once campaigns start.
Can I warm up and send cold emails at the same time?
Yes, and you should, though not from day one. Start real campaigns around week four at 5–10 emails per day per mailbox while warmup continues, then add roughly 5 per day each week. Keeping warmup active is what protects the mailbox during pauses and volume dips.
Does Inboxlogy warm up my mailboxes for me?
No. Inboxlogy provisions authorized Google Workspace and Microsoft 365 mailboxes with SPF, DKIM and DMARC configured, dedicated US/EU IPs, full ownership and admin access, and an API. Warmup runs inside whichever sending tool you connect them to, such as Instantly, Smartlead or ReachInbox, using that tool's own warmup network and settings.
How many mailboxes do I need for 1,000 cold emails per day?
At a safe 20–40 emails per mailbox per day, roughly 25–50 mailboxes spread across 10–20 secondary domains, with 1–3 mailboxes per domain. Scaling through more mailboxes is safer than pushing individual mailboxes toward provider limits, because provider limits describe when mail is rejected, not when it is filtered.