What mailbox warmup actually does

A new domain is a stranger. Nobody at Google or Microsoft has ever seen it send a message, so nothing about it has been decided yet — not that it is good, not that it is bad. Warmup is the process of turning that blank record into a boring, predictable one.

The receiving side keeps a file on you

Every provider builds a reputation profile for your sending domain and the IP behind it. The inputs are unglamorous:

• how many messages you send per day, and whether that number moves smoothly
• how many land in a real inbox versus a spam folder
• how often a human replies, opens, or moves a message out of spam
• how often someone marks you as spam, and how often you hit an address that does not exist

A domain that goes from zero to two thousand messages in a day is reading as a compromised account, because that is what compromised accounts do. A domain that climbs slowly and gets replies reads as a person doing their job.

What the ramp looks like

The shape matters more than the ceiling. A typical ramp starts in the low tens of messages per day and adds a small, consistent increment. There is no prize for reaching volume in week one — the whole point is to never produce the spike that gets you filtered.

Two things people get wrong here:

1. Pausing and restarting. A gap followed by a jump back to the old volume is a spike, even though the total is the same.
2. Warming the domain but not the content. Reputation attaches to what you send, not only to how much. Swapping to a completely different message on the day you go live undoes part of what the ramp bought you.

Authentication is the floor, not the ceiling

SPF, DKIM and DMARC do not make you trusted. They make you identifiable, which is the precondition for being trusted at all. Without them the receiving side cannot reliably attribute good behavior to you, so the reputation you build leaks away.

Get them right once, at the start, and then stop thinking about them.

How long it takes

Two to four weeks of uninterrupted, unremarkable sending is the honest answer for most domains. Providers that see you every day for a month have enough evidence to stop guessing.

The uncomfortable part is that there is no way to buy your way past it. You can only avoid restarting the clock.