New domain vs new subdomain vs new IP: what actually needs warm-up for email deliverability

deliverability

Warm-up advice gets muddled because teams often change more than one thing at once.

They launch a new brand domain, move to a new ESP, add a new dedicated IP, change the bounce domain, and switch message format in the same week. Then deliverability drops and the postmortem says, "the domain was not warmed up" even when the real issue was the IP, or the recipient quality, or broken alignment.

The practical answer is simpler than the folklore:

The short answer

Warm up the thing that is new to the receiver and is carrying meaningful reputation signals.

In practice:

  1. A new dedicated IP needs IP warm-up.
  2. A new domain used as the visible sender identity usually needs domain-level ramping too.
  3. A new subdomain is not a free reset. It often needs a controlled ramp, but it is not identical to launching a totally unrelated new apex domain.
  4. If the IP stays shared and managed by the ESP, the warm-up problem is often more about the sending domain, stream, volume shape, and audience quality than about the raw IP.

That is the operational frame that avoids most confusion.

Why people talk past each other on this topic

Mailbox providers do not score one single "sender reputation" number.

They look at multiple layers at once, including:

  • the visible From domain
  • the authenticated SPF and DKIM identities
  • the sending IP or shared pool
  • recipient engagement and complaint rate
  • traffic consistency, message category, and history

Google is explicit that Gmail tracks volume, feedback, and limits per domain and IP address, and that DKIM and SPF quotas are domain-specific while IP quota is shared across senders on that IP. It also recommends slow, consistent increases and separate ramping after significant infrastructure or header changes. Source: Google's Email sender guidelines.

Microsoft is equally explicit that Outlook.com filtering is influenced by the sending IP, domain, authentication, list accuracy, complaint rates, content, and more. Source: Outlook.com's Postmaster troubleshooting guidance.

So the right question is not "do domains warm up or do IPs warm up?"

The right question is "which sender identity just changed, and which reputation layer will the receiver have to trust from scratch or near-scratch?"

Case 1: new dedicated IP

This is the easiest case.

Yes, a new dedicated IP needs warm-up.

Amazon SES says providers are less likely to accept mail from new IP addresses with little or no history, and recommends gradually increasing volume while sending to your most active users first. Source: Amazon SES Warming up dedicated IP addresses.

Microsoft says new IPs typically do not have reputation yet, are more likely to experience deliverability issues, and may need a couple of weeks or sooner to ramp depending on volume, list accuracy, and complaint rate. Microsoft also notes that a new IP under an already-authenticated domain can inherit some of that domain's reputation. Source: Outlook.com's Postmaster troubleshooting guidance.

That last point matters.

A strong established domain can help a new IP ramp faster, but it does not make the IP instantly warm. It just means the cold-IP problem may be less severe than if both the domain and IP are brand new.

If this is your situation, IP address migration for mail goes deeper on the overlap strategy.

Case 2: new apex domain

If you start sending serious volume from a domain that has little or no sending history with major mailbox providers, treat that like a warm-up case even if the infrastructure is technically fine.

Google's FAQ says enforcement for new domains is on an accelerated timetable, and defines a new domain there as one that has not sent more than 5,000 emails a day to personal Gmail accounts since January 1, 2024. Source: Google's Email sender guidelines FAQ.

That does not mean every small new domain is automatically blocked. It means you should not assume a fresh visible identity can be pushed immediately at full campaign volume just because SPF, DKIM, and DMARC are present.

What usually needs ramping here is not only the SMTP source. It is the trust story around the domain itself:

  • do recipients recognize it?
  • does engagement start clean or weak?
  • does the domain show stable sending behavior?
  • does the domain align cleanly via SPF or DKIM for DMARC?

Authentication is still mandatory. But authentication alone is not the same thing as history.

Case 3: new subdomain under an existing primary domain

This is the case that causes the most bad advice.

Some teams hear that subdomains inherit from the parent and conclude there is no warm-up at all. Others treat every new subdomain as if it were a completely unrelated new company. Neither view is quite right.

Google's FAQ says bulk sender classification counts all messages sent from the same primary domain. Its example says mail from solarmora.com and promotions.solarmora.com counts together toward the 5,000/day threshold. Source: Google's Email sender guidelines FAQ.

That means subdomains are not invisible to the reputation and compliance story of the parent brand.

At the same time, a new subdomain is often a new stream with its own:

  • recipient expectations
  • content type
  • complaint profile
  • headers and bounce handling
  • engagement pattern

So what is the practical answer?

A new subdomain usually needs a controlled introduction

If news.example.com starts sending promotional mail for the first time, do not assume the mailbox provider sees it as fully equivalent to long-stable receipts from example.com or notify.example.com.

The parent brand history can help. The exact subdomain is still a new behavior pattern.

That is why dedicated subdomains are useful operationally but are not magic reputation bypasses. They help you isolate streams, which is good. They do not remove the need to ramp volume sensibly.

A new subdomain is usually a partial warm-up problem, not a zero warm-up problem and not always a full-from-scratch reset. Treat it as a new sender stream under a related brand identity.

If your main goal is clean stream separation, Transactional vs marketing email separation is the best companion post.

What does not usually need warm-up by itself

Not every mail change is a warm-up event.

Usually, these changes do not create a separate warm-up requirement on their own if the visible sender, recipient quality, and overall traffic pattern remain stable:

  • rotating a DKIM selector
  • moving a DMARC policy from p=none to enforcement
  • adding another aligned DKIM signature
  • changing DNS hosters without changing the sending stream
  • replacing one aligned provider-owned bounce hostname with another while the visible domain, list quality, and volume stay stable

Those can still break deliverability if implemented badly. They just are not reputation warm-up events in the same sense as a fresh IP, fresh domain, or brand-new stream.

The combinations that matter most

In real life, warm-up risk comes from combinations.

New domain plus new IP

This is the hardest launch shape.

Both the visible identity and the infrastructure are cold. Be conservative.

Existing domain plus new dedicated IP

Mostly an IP warm-up case, but domain reputation can soften the ramp if the domain is already trusted and authentication stays aligned.

Existing primary domain plus new subdomain on shared ESP infrastructure

Usually more of a stream and domain-introduction problem than a raw IP problem, because the IP pool may already be established while your exact stream is new.

Existing subdomain plus new content type and big volume jump

Still a warm-up risk, even if no DNS names changed.

Google specifically recommends gradually increasing the modified segment of traffic after significant infrastructure or header changes. That same caution makes sense when the audience or content profile changes sharply too. Source: Google's Email sender guidelines.

The deliverability mistake behind most "warm-up" failures

Teams often say they are warming up a domain when what they are really doing is this:

  1. sending a new stream
  2. to a weak or stale audience
  3. from changed infrastructure
  4. with different headers
  5. at much higher volume than before

That is not a single warm-up variable. That is five.

When that bundle fails, the root cause gets blamed on whichever noun was most recently discussed in a meeting.

If you want a cleaner diagnosis, separate these questions:

  1. Is the visible sender identity new?
  2. Is the sending IP new?
  3. Is the recipient segment new or lower quality?
  4. Did authentication or alignment change?
  5. Did the message category change from transactional to promotional?

That breakdown gets much closer to what mailbox providers actually evaluate.

How DMARC fits into this

DMARC does not warm up anything by itself.

What it does is remove ambiguity about which domain is claiming responsibility for the message. Google requires direct mail for bulk senders to align the From domain with SPF or DKIM, and Microsoft documents that SPF, DKIM, and DMARC are only part of a broader trust evaluation. Sources: Google's Email sender guidelines and Microsoft's Email authentication in Defender for Office 365.

That means DMARC helps warm-up indirectly because it gives receivers a stable aligned identity to build history around.

If you are ramping a domain or subdomain, DMARC and sender domain warm-up covers that interaction in more detail.

A simple rule for deciding what needs warm-up

Use this rule:

  1. If the IP is new, plan IP warm-up.
  2. If the visible sender domain is new, plan a cautious domain ramp.
  3. If the subdomain is new, plan a controlled stream rollout even if the parent domain is established.
  4. If only DNS mechanics changed but the trusted sender identity and traffic pattern did not, validate carefully but do not automatically call it warm-up.

That rule is not perfect, but it is much better than arguing that only domains matter or only IPs matter.

Practical rollout advice

If there is one thing worth keeping boring, it is the launch pattern.

  • start with your best recipients
  • keep volume increases gradual
  • avoid sudden bursts
  • keep authentication aligned on real delivered samples
  • do not combine a new stream with stale data just to create volume
  • watch complaints and throttling before the next increase

Google recommends a consistent rate, engaged users first, and slower sending if bounces or deferrals rise. Outlook.com points to complaint rate, list accuracy, domain, and IP reputation as key factors in deliverability. Those two documents together are enough to justify a cautious rollout even before looking at any vendor-specific playbook.

Bottom line

New IPs need warm-up most obviously.

New domains also need cautious ramping because authentication is not the same thing as sender history.

New subdomains sit in the middle: they benefit from the parent domain context, but they are still new sender streams and should not be launched recklessly.

So the safest answer is not "warm up the domain" or "warm up the IP" as if only one can be true.

Warm up whichever trust layer is new, and avoid changing too many trust layers at the same time.

Previous Post