Custom SMTP vs Mesh SMTP – Easy WordPress SMTP &

Make your WordPress email arrive WordPress still hands your email to the PHP mail() function. Most hosts have switched it off or throttled it because spammers loved it, and where it still runs, unauthenticated mail lands in spam. If your contact form says thank you and nothing ever arrives, this is why. Custom SMTP sends your email through the provider you already use instead: your host’s SMTP server, Gmail, Outlook, Brevo, SendGrid, Mailgun, Postmark or the Amazon SES API. It logs every message with its outcome, lets you preview and resend failures, and alerts you when sending spikes or starts failing. Everything is in the free plugin: no account to create, no third-party relay, no pro version. Built for modern WordPress: WordPress 7.0 ready, PHPMailer 7.0.2 compatible, stateless / cloud-ready (Docker, Kubernetes), and fully translated in English and French. Documentation lives at customsmtp.com/docs/, with step-by-step guides for twelve providers and a developer guide covering constants, environment variables and the Amazon SES API. Send through your own SMTP provider Point the plugin at the server you already pay for or the free tier you already use, with a preset that fills the technical values for you: Presets for twelve providers: Gmail, Outlook, Amazon SES, SendGrid, Mailgun, Brevo, Postmark, Mailjet, Zoho, Yahoo, iCloud and Scaleway, plus “Other / Custom” for any SMTP server. From Name and From Email applied to every outgoing email, with optional Reply-To, CC and BCC. SSL/TLS encryption, and optional authentication for relay servers that need none. Password encrypted at rest (AES-256-CBC with your WordPress salts), never displayed back in the form. Test without guessing: test the SMTP connection without sending anything, or send yourself a real test email. A log of every email, with preview and resend Never wonder if your emails were sent again. Logging works out of the box and captures every message going through wp_mail(): WooCommerce order notifications, contact form submissions, password resets, all of it. Delivery status (sent or failed) with the exact SMTP error when a message fails, and the stored headers for advanced troubleshooting. Preview the email body in wp-admin, in an Outlook-style sidebar, without sending anything again; view the HTML source, or download any email as an HTML file for archiving. Resend a failed email straight from the logs once your configuration is fixed. Search by recipient, subject or status; filter by date range; export to CSV for reporting and compliance. Configurable retention with automatic purge (30 days by default), and content storage you can switch off in one click. Unusual Usage Alerts A compromised contact form or a runaway plugin can turn your site into a spam relay, and a revoked password or an exhausted provider quota can stop your emails silently. Custom SMTP watches for both and warns you. Sending spikes — get an email when more messages than expected go out within an hour or a day. Thresholds are absolute, never relative, so a quiet site that sends a handful of emails a week is never woken up by statistical noise. Delivery failures — get warned as soon as several emails fail in a row, or when too many of the last messages sent failed. Counted over the last emails sent rather than over a period of time, so it works just as well on a site that sends twice a week as on a busy store. A channel that survives the outage — alerts go out by email, to an optional HTTPS webhook (Slack, Teams, any JSON endpoint), and to a persistent notice in wp-admin, because the one moment you need the alert is the moment email itself is broken. No noise — a configurable cooldown keeps an ongoing incident from filling your inbox, and the alert email is never logged nor counted against your own thresholds. Off by default — turn it on in Settings and set the thresholds that match your site. Manage WordPress Notifications WordPress sends a handful of emails on its own, and some of them get old fast: a notice to the administrator every single time a user resets their password, a report after every automatic plugin update, a message for every comment awaiting moderation. Switch off the ones you do not want, one checkbox each, no code. Password reset and new user notices to the administrator — the user still gets their reset link and their welcome email, only the copy to the admin stops. Automatic update reports — core, plugins and themes, separately. Comment notifications — awaiting moderation, and new comment to the post author. Nothing is hidden from you — a notification you switch off is never created, so it will not appear in the Email Logs either, and the screen tells you that. Account recovery is never at risk — the emails users need to regain access to their account are deliberately out of reach of this screen. Off means off, on stays on — installing or updating the plugin never silences an email your site was already sending. Deliverability, privacy, security Cooperates with the automatic Envelope-From / Return-Path behavior introduced in WordPress 6.9, which improves SPF, DKIM and DMARC alignment on strict hosts (Amazon SES, Postmark, etc.). UTF-8 and emoji handled end-to-end in subjects, bodies and headers. All data stays in your WordPress database: no third-party calls, no telemetry, and no external processor to declare in your GDPR records. Email preview rendered in a sandboxed iframe, so no JavaScript from a logged email ever runs in wp-admin. All admin actions protected with nonces and capability checks; the SMTP password is encrypted at rest. For developers: containers, config-as-code, Amazon SES API The developer guide covers this surface in depth; the short version: Stateless and cloud-ready: no filesystem writes, no shared storage, safe on read-only filesystems. Works on Docker, Kubernetes, AWS ECS/Fargate, Google Cloud Run, and with Bedrock or Trellis stacks. Every setting from a constant or environment variable: define CUSTOM_SMTP_ and it overrides the saved value everywhere, with the field shown read-only in wp-admin and a badge naming the variable. On Multisite, a network-wide option can configure every site at once. Amazon SES API with IAM roles: send through the SESv2 API authenticated by your ECS task role or EC2 instance role, with no access keys and no stored credentials. Raw MIME preserves HTML, attachments, CC/BCC, Reply-To and custom headers, and it works with or without the AWS SDK for PHP. Details in the FAQ below. Abilities API (WordPress 6.9+): custom-smtp/connection-health and custom-smtp/send-test-email are exposed to MCP-enabled AI assistants and automation tools (n8n, Make), behind the same manage_options capability check as wp-admin.

Mesh SMTP is a lightweight WordPress SMTP plugin for website owners who want a clear way to configure outgoing email without a crowded dashboard. Connect WordPress to Gmail, Google Workspace, Microsoft 365, Zoho Mail, Hostinger Email, SendGrid, Mailgun, or any custom SMTP server. The guided setup explains each field in plain language and separates mailer acceptance from real inbox delivery. Mesh SMTP works with email sent through WordPress wp_mail(), which commonly includes: Contact form notifications Password reset emails New user and administrator notifications WooCommerce transactional emails WordPress update and security notifications Messages sent by compatible themes and plugins Easy 3-Step WordPress SMTP Setup Choose your email provider from simple provider cards. Enter the SMTP connection details with clear host, security, port, authentication, username, password, and sender guidance. Send and confirm a test email so the dashboard does not claim delivery before you verify the inbox. Main Features Simple three-step SMTP setup wizard Provider presets for Gmail, Microsoft 365, Zoho, Hostinger, SendGrid, and Mailgun Custom SMTP support with optional authentication for trusted relays Test email flow with honest Accepted, Received and Confirmed, Failed, and Retest Required states Automatic test invalidation when SMTP settings change Clear SMTP host, TLS/SSL, port, authentication, username, password, From Email, and From Name fields Recommended port guidance without overwriting a custom port Saved password indicator with a dedicated Remove Saved Password action Warning when another common SMTP plugin appears active Microsoft 365 warning when OAuth or tenant SMTP AUTH policy may be required Privacy-first email logging: Off, failures only, or all mailer results Optional masked, hidden, or full recipient storage Optional subject logging and 7, 14, or 30-day retention Clear Logs and Clear Last Failure actions Masked support summary by default, with an explicit option to include personal details Safe JSON settings export and import without exporting the SMTP password wp-config.php constants for deployment-managed SMTP credentials WordPress Site Health integration Accessible provider cards, wizard steps, live status messages, and password controls Admin assets load only on the Mesh SMTP screen Capability checks, nonces, sanitization, and escaped output Honest Test Email Results A successful wp_mail() response means WordPress and PHPMailer accepted the sending request without returning an error. It does not prove that the message reached the Inbox. Mesh SMTP therefore uses a two-part verification flow: Accepted by mailer — WordPress returned no sending error. Received and confirmed — an administrator checked the Inbox or Spam folder and confirmed receipt. This avoids a misleading “delivered” message when the receiving mail server may still delay, filter, or reject the email. Privacy-First Email Logs Email logging is configurable. The recommended default stores failed emails only, masks recipient addresses, hides subject lines, and removes old entries after 14 days. Mesh SMTP never stores email bodies or attachments in its activity log. Supported Provider Presets Gmail and Google Workspace Outlook and Microsoft 365 Zoho Mail Hostinger Email SendGrid Mailgun Custom SMTP Microsoft 365 Note Some Microsoft 365 tenants do not allow username/password SMTP. OAuth 2.0 or an administrator-enabled SMTP AUTH policy may be required. Mesh SMTP currently supports standard SMTP credentials and displays a warning when the Microsoft preset is detected. Secure wp-config.php Constants Developers can define these constants in wp-config.php to override values saved in WordPress: MESHSMTP_ENABLED MESHSMTP_HOST MESHSMTP_PORT MESHSMTP_SECURE MESHSMTP_AUTH MESHSMTP_USERNAME MESHSMTP_PASSWORD MESHSMTP_FROM_EMAIL MESHSMTP_FROM_NAME The SMTP password is never shown back in the admin interface.