How to Warm Up a Microsoft 365 Inbox (Outlook, Exchange Online)

Microsoft 365 filters mail differently than Gmail does, and a warmup approach copied straight from a Google playbook will miss the parts that matter: Exchange Online Protection, SmartScreen, tenant-level reputation, and Microsoft's own outbound limits. This guide covers warming up a new Microsoft 365 mailbox from zero — what to configure first, how to connect it, what the ramp looks like, and where Microsoft specifically will trip you.

New to warmup entirely? Read What Is Email Warmup? first — the mechanics below build on it.

Prerequisites: authentication before anything else

Exchange Online Protection (EOP) — the filtering stack in front of every Microsoft 365 mailbox — checks SPF, DKIM, and DMARC on every message. Set up all three before the first warmup send:

• SPF — a TXT record containing v=spf1 include:spf.protection.outlook.com -all.
• DKIM — enable it per-domain in the Microsoft Defender portal under Email & collaboration → Policies & rules → Threat policies → Email authentication settings. Microsoft gives you two CNAME records (selector1._domainkey and selector2._domainkey) to publish; DKIM signing doesn't start until you flip it on after the DNS propagates. Without this step, your mail is signed with the shared onmicrosoft.com domain — technically valid, but it doesn't build your domain's reputation.
• DMARC — publish v=DMARC1; p=none; rua=mailto:[email protected] at _dmarc.yourdomain.com to start.

Full record-by-record instructions are in our SPF/DKIM/DMARC guide, and the free checker will confirm everything resolves correctly before you begin.

As with any provider, domain age matters. A domain registered last week gets extra scrutiny everywhere; give it a couple of weeks of DNS-configured existence, ideally overlapped with the start of warmup.

Connecting the mailbox

Two options for connecting Microsoft 365 to EmailWarmer:

1. OAuth (recommended). Sign in with Microsoft and grant access. This uses modern authentication, which is what Microsoft wants — basic auth for SMTP/IMAP has been progressively shut off across Microsoft 365, and tenants created recently often have it disabled entirely. The connection guide walks through it.
2. App password over SMTP/IMAP. Only viable if your tenant still permits it: it requires 2FA enabled on the account plus an admin who hasn't disabled SMTP AUTH. If you have the choice, use OAuth — it's more reliable and survives policy changes.

The ramp schedule

EmailWarmer's default ramp is the same regardless of provider, because the principle — slow, human-looking growth — is universal:

The ramp stops when it reaches your configured target and holds there; plan caps are 20/day on Free, 100 on Starter, and 200 on Pro. Every warmup email goes to another real mailbox in the peer network, which opens it, replies to roughly 35% of threads, and rescues anything that lands in Junk. Sends are spread across your configured working hours and timezone. If the bounce rate exceeds 3%, volume automatically drops to 25% until the problem is resolved — a bouncing mailbox should be sending less, not more.

What Microsoft's filters are actually doing

It helps to know the machinery your warmup mail is flowing through:

• EOP runs connection filtering, anti-spam, and anti-phishing on all inbound mail. Its spam verdict is stamped on each message as an SCL (Spam Confidence Level) header — 5 or above typically means Junk. (You can read these yourself; see how to read email headers.)
• SmartScreen-derived reputation feeds both EOP and the consumer Outlook.com filter. It weighs sender reputation heavily and reacts quickly to complaint signals.
• Focused Inbox adds a wrinkle unique to Microsoft: mail can pass every filter and still land in the "Other" tab, which for outreach purposes is a half-miss. Engagement with your messages — replies especially — is what trains Focused Inbox in your favor. This is one reason warmup replies matter beyond raw spam placement.

The practical consequence: Microsoft rewards steady, engaged senders and reacts badly to spikes, much like Gmail, but its junk decisions can be more abrupt — a mailbox that was inboxing fine can drop to Junk quickly after a bad batch. The warmup engagement baseline is your buffer against that.

Tenant reputation: your neighbors matter

Reputation in Microsoft 365 doesn't stop at the mailbox. Your tenant — the organization-level account containing all your users and domains — carries reputation of its own, and Microsoft has been explicit about enforcing at that level: as of 2026, Exchange Online is rolling out tenant-wide external recipient rate limits, and outbound spam from one mailbox can get the whole tenant's outbound mail routed through Microsoft's high-risk delivery pool.

What this means in practice:

• Don't mix roles carelessly. A tenant hosting both your company's real correspondence and twenty aggressive outreach mailboxes puts the former at risk from the latter.
• One compromised or spammy mailbox hurts everyone. Watch for the "restricted user" state — Microsoft blocks a mailbox from sending when it trips outbound spam thresholds, and an admin must release it from the Defender portal.
• Warm mailboxes individually anyway. Tenant reputation is a shared floor, but per-mailbox and per-domain history still decide placement. A new mailbox in an established tenant warms faster, not instantly.

Know your sending limits

As of 2026, Exchange Online allows each mailbox 10,000 recipients per rolling 24 hours and 30 messages per minute over SMTP submission. That daily ceiling is generous, but the per-minute rate matters for tooling: anything that bursts sends will get throttled. Consumer Outlook.com is far tighter — reportedly around 300 recipients/day, less for new accounts. Warmup and campaign volume share these budgets; the full picture across providers is in our sending limits comparison.

Wrapping up

Warming a Microsoft 365 inbox is the same discipline as anywhere else — authenticate, ramp slowly, let engagement accumulate — plus one extra habit: think at the tenant level, because Microsoft does.

When you're ready, the free plan warms one mailbox free forever — connect your Microsoft 365 account and let it run for a few weeks before your outreach needs it.