Secondary domain for cold email setup and inbox planning

Your main domain sends invoices, support replies, and the occasional sales follow-up. Then someone decides to run cold outbound from it too. A few weeks later, bounce rates creep up, Gmail starts throwing legitimate customer emails into spam, and nobody can figure out why support tickets stopped landing in the inbox.

This is the exact scenario that pushes teams toward a secondary domain for cold email. I’ve watched this pattern play out across lemlist internal data covering 412.6M messages: the moment a team scales past a handful of emails per rep per day, the main domain becomes a liability instead of an asset.

In this post, I’ll show you what a secondary domain actually is, when you need one, how to name and size your setup, and how to warm, rotate, and retire domains without tanking your reply rates. I’ll pull real numbers from lemlist data along the way, including why adding more inboxes often hurts reply rates instead of helping.

Get this part wrong and you risk your entire email infrastructure, not just one campaign. Get it right, and your main domain stays untouched while your outbound scales as aggressively as you want.

What a secondary domain is

A secondary domain is a separate domain, close to your brand name, that you use only for outbound email. It keeps your main domain’s reputation untouched if a cold campaign triggers spam complaints or bounces.

Think of it as a firewall. Your main domain handles customer replies, invoices, support tickets, and internal communication. Your secondary domain handles prospecting. If the secondary domain takes a hit, your day-to-day email keeps flowing.

People often confuse secondary domains with subdomains and aliases. They solve different problems.

An alias is fine for warm conversations. A subdomain gives you some separation, but mailbox providers still associate it with the parent. A secondary domain gives you full isolation, which is what matters when you’re sending at scale. For a deeper look at how inbox placement works, see the email deliverability guide.

When you need a secondary domain

You need one the moment your outbound volume could damage your main domain. Here are the clearest triggers:

• •

  You plan to send more than a handful of cold emails per rep per day.

• •

  Multiple reps are sending outbound from the same company.

• •

  You’re an agency sending on behalf of clients.

• •

  Your main domain already carries invoices, support threads, or transactional email you can’t afford to lose.

You probably don’t need one if you’re a solo founder sending 5 to 10 personalized emails a day to people who half-expect to hear from you. Mostly warm outreach from a healthy domain with low volume is fine on your primary. Everyone else should set up at least one secondary domain before launching campaigns.

How to choose and name secondary domains

The goal is a domain that looks like it belongs to your brand. Prospects will check it. If it feels off, you lose trust before they read a word.

Use a fictional brand called Bright to see the common patterns:

• •

  Prefix: getbright.com, trybright.com, hellobright.com

• •

  Suffix: brighthq.com, brightteam.com, brightapp.com

• •

  Alternate TLD: bright.co, bright.io

A few rules that keep you out of trouble:

• •

  Keep the brand name recognizable at a glance.

• •

  Skip hyphens and numbers. They look spammy.

• •

  Avoid misspellings of your real domain. Swapping letters or adding extra characters looks like phishing, and spam filters treat it that way.

• •

  Don’t pick a name that implies something your company isn’t (e.g. brightbank.com for a SaaS company).

For mailboxes, use real first names. If Sarah and James are your SDRs, create sarah@trybright.com and james@trybright.com. Fake names create problems the moment a prospect replies and asks for “Mike” and nobody knows who that is.

How many domains and inboxes you need

Start with your daily send target and work backward.

The formula: daily emails you want to send ÷ emails per inbox per day = number of inboxes. Then group those inboxes across domains (two inboxes per domain is a healthy ratio).

The per-inbox volume matters more than most teams realize. lemlist internal data across 412.6M messages shows a clear pattern:

Lower volume per inbox means higher reply rates and fewer bounces. We recommend staying under 50 emails per inbox per day, ideally 30 to 40. Be even more conservative if you’re targeting the US, where spam filtering is the most aggressive.

Worked example: A team of six SDRs wants to send about 210 cold emails a day. At 35 emails per inbox per day, they need 6 inboxes. Spread across 3 secondary domains with 2 inboxes each, that’s a clean, manageable setup. In lemlist internal data, this exact structure (domains bought 60 days before the first campaign) is one of the healthiest anonymized setups we see.

More inboxes won’t save a bad list. This is the part most guides skip. In US campaigns tracked in lemlist internal data, sending from 1 inbox produces a 2.81% reply rate. Spreading the same campaign across 10 or more inboxes drops replies to 0.95%. Why? Because teams that add inboxes usually do it to push more volume into a bigger, colder list. List quality is the real bottleneck.

Scale with better targeting before you add inboxes. Once your reply rates hold, add buffer domains for domain rotation so you can rest domains without pausing campaigns.

How to set up a secondary domain

1. Buy the domain

Pick a reputable registrar (Google Domains, Namecheap, Cloudflare) or buy directly inside your sending tool. The important thing is that you own the domain and control its DNS.

2. Set up authentication

Every secondary domain needs four records configured: SPF, DKIM, DMARC, and MX. These tell mailbox providers that your emails are legitimate and that your domain is authorized to send them. Skip one and you’re handing spam filters an easy reason to reject you. Walk through the full setup in the email authentication guide.

3. Redirect to your main website

Set up a 301 redirect from your secondary domain to your main website. Prospects will type the domain into a browser to check if you’re real. If they land on a parked page or an error, you’ve lost credibility before the conversation starts.

4. Create mailboxes with real names

Each mailbox should have a profile photo and an email signature that match your main brand. Use real team members’ names.

One detail worth planning: match your email provider to your prospects’ provider. lemlist internal data shows Google-to-Google emails reply at 4.1% and Microsoft-to-Microsoft at 3.2%. Cross-provider routes (Google to Microsoft or vice versa) drop to about 2.5%. If most of your prospects are on Outlook, set up your sending mailboxes on Microsoft.

5. Set up a custom tracking domain

A custom tracking domain replaces the shared tracking domain your sending tool uses by default. It’s a small DNS change that makes a measurable difference. In France, lemlist internal data shows a bounce rate of 6.5% with a custom tracking domain versus 9.1% without. That’s roughly a quarter fewer bounces. Set yours up using the custom tracking domain guide.

Warm up before you send

A brand-new domain has zero reputation. Mailbox providers don’t trust it, and they shouldn’t. Warm-up builds that trust by gradually sending and receiving real emails, proving the domain behaves like a legitimate sender.

The data makes the case clearly. lemlist internal data shows a domain under 30 days old bounces at 10.4% with a reply rate of just 1.9%. After a year, those numbers settle to 6.6% bounces and 3.0% replies. You can’t skip the clock, but you can start it early. The anonymized healthy setup we referenced earlier bought domains 60 days before the first campaign went live.

How long you warm up before sending matters too. lemlist internal data shows an inbox warmed for less than two weeks before its first campaign bounces at 8.6% in France. After 90 or more days of warm-up, that drops to 6%.

And warm-up isn’t a one-time task. Keep it running alongside your campaigns, permanently. In the US, lemlist internal data shows inboxes with active warm-up bounce at 6.2% versus 9.4% with warm-up turned off. That’s roughly a third fewer bounces just for leaving it on. For the full warm-up playbook, see how to warm up an email account.

Rotate domains and protect reputation

Once your domains are warmed and sending, spread your volume across them evenly. The idea is simple: no single domain or mailbox carries a disproportionate share of your sends. If one domain dips, the others keep your pipeline moving.

Set per-mailbox sending limits that stay within the safe range (30 to 40 emails a day). Respect the daily caps your provider enforces. For the full rotation strategy, see the domain rotation guide and how to work within email sending limits.

Monitor and retire a domain

Secondary domains are disposable by design. That’s the whole point. But you need a system for knowing when one is in trouble.

Watch for these signals:

• •

  Bounce rate climbing above your baseline

• •

  Reply rate dropping over consecutive campaigns

• •

  Emails landing in spam (test with inbox placement checks)

• •

  Warm-up scores declining

When you see the warning signs, follow a simple decision rule. First, pause all outbound from that domain. Then diagnose: is it a list quality issue, a content issue, or has the domain’s reputation been damaged? If the domain just needs rest, pause it for two to four weeks with warm-up still running, then ramp back slowly. If the reputation is burned, retire the domain and replace it with a new one you’ve already been warming.

Keep a buffer domain warming at all times so you’re never caught without a replacement. And the one rule that never bends: your main domain stays out of outbound entirely.

How to set up secondary domains in lemlist

You can buy domains and mailboxes directly inside lemlist. Go to Settings, then Buy domains & emails. Choose Google, Outlook, or SMTP as your provider. Authentication records (SPF, DKIM, DMARC) are configured automatically, so you skip the manual DNS work.

New mailboxes appear in both lemwarm and lemlist as soon as they’re created, ready to start warming up immediately.

For agencies managing multiple clients, lemlist supports multiple teams. Each team is a separate workspace with its own billing, campaigns, leads, and unsubscribe list. Client sending stays fully isolated.

Inside your campaigns, set your sending schedule and control pacing between new leads. Use a custom tracking domain for better deliverability. lemlist includes a bounce alert that fires at 10% and an automatic pause that stops a campaign at 50% bounces after 100 leads have been contacted. You’ll know something is wrong before it becomes a real problem.

Final takeaway

Secondary domains protect your main domain, give you room to scale outbound, and let you retire a sending domain without disrupting your business. Buy them early, warm them properly, and monitor them like any other piece of your sales infrastructure. The teams that treat domain setup as a system (instead of a one-time task) are the ones that keep reply rates healthy quarter after quarter.

Build your first signal-based sequence in lemlist.