PHP mail() is unauthenticated.
Most WordPress hosts ship with mail() that hits the internet from a random shared IP with no SPF or DKIM record. Inboxes treat that as spam — and your form submissions silently disappear.
Contact Form 7, Gravity Forms, Forminator, WPForms, Elementor Pro Forms, WooCommerce, password resets — all delivered from authenticated infrastructure. No extra SMTP plugin, and one DNS record for your sending domain.
Free tier: 5,000 routed emails / month · all 5 reliability layers · 1 sending domain of your own.
Last 10 routed emails
LiveThe problem
Three failure modes account for ~95% of "I filled out your contact form but you never replied" complaints. All three are fixable. None of them are your fault.
Most WordPress hosts ship with mail() that hits the internet from a random shared IP with no SPF or DKIM record. Inboxes treat that as spam — and your form submissions silently disappear.
Configuring WP Mail SMTP, Post SMTP, FluentSMTP and friends with the right credentials, OAuth scopes, app passwords, and headers takes hours — and most owners give up halfway.
You don't even know your contact form is failing until a customer complains weeks later that they 'reached out and never heard back'. By then, the lead is gone.
One plugin. One toggle. One domain. Once your domain is verified, every email your site sends goes through DKIM-signed, DMARC-aligned infrastructure.
Free WordPress plugin, < 200 KB. Upload the zip from /downloads/securessmtp.zip.
In the SecureSMTP dashboard, copy your site API key. Paste it into SecureSMTP → Settings in WP-admin. Leave "Route outgoing email through SecureSMTP" off for now.
Open Sending domains in the SecureSMTP dashboard, add your domain and publish the DNS records it shows: one DKIM record in Simple mode, three records in Advanced mode. DNS takes a few minutes to publish, sometimes longer. Until the domain is verified, a new account can send up to 10 test emails a day to its own address.
When your domain shows as verified, toggle "Route outgoing email through SecureSMTP" to ON. Anything any plugin sends via wp_mail() — CF7 notifications, Woo order receipts, password resets, Gravity confirmations — then leaves through SecureSMTP's authenticated infrastructure, signed with your domain.
End-to-end email path
Visitor
Fills your form
WordPress form
CF7 / Gravity / etc.
wp_mail()
Native WP API
SecureSMTP plugin
Intercept + sign
Mail Router
Edge — securessmtp.com
SecureSMTP Platform
Quota + audit + log
SecureSMTP MTA
DKIM-signed, DMARC aligned
Inbox
Delivered, on time
Fail-safe by design.
If the SecureSMTP platform is ever unavailable, WordPress falls back to its normal mailer automatically — your email is never silently dropped, even during planned maintenance.
SecureSMTP hooks into WordPress at the wp_mail() layer. That means every plugin that sends email through the standard API is supported automatically — no per-plugin SDK, no integration code.
CF7 calls wp_mail() for every notification. SecureSMTP catches all of them — admin notifications, auto-replies, the lot. No special CF7 config: verify your sending domain, then enable Email Delivery in SecureSMTP settings, and CF7's existing form templates start landing in inboxes.
8M+ WordPress sites use Contact Form 7
Forminator's form notifications use wp_mail() and route cleanly through SecureSMTP — including custom Email actions, conditional notifications, and admin-side digest emails. Multi-recipient notifications stay multi-recipient: we don't collapse them.
400K+ sites use Forminator
Elementor Pro Forms' Email action triggers wp_mail() under the hood. Routed through SecureSMTP for reliable delivery, no SMTP plugin needed. Works with Email 2 (the second recipient action) and with the Webhook + Email combination some users wire up.
1M+ sites use Elementor Pro
Password resets, new-user notifications, comment moderation emails, WooCommerce order receipts, EDD purchase confirmations, Gravity Forms, WPForms, Ninja Forms — anything that calls wp_mail() gets routed. If a plugin uses PHPMailer directly (without wp_mail), our PHPMailer interceptor in plugin v1.18+ catches that too.
Compatible with every wp_mail()-using plugin we know of
Delivering an email is harder than it looks. Each layer below catches a different failure mode — together they're why SecureSMTP-routed mail lands in the inbox, not the spam folder.
In Simple mode you publish one DKIM record and no SPF record, and DMARC passes through DKIM. In Advanced mode you also add an MX and an SPF record on a bounce subdomain, so SPF aligns to your domain too. You do not add a SecureSMTP SPF include to your own SPF record.
Each message is cryptographically signed with a 2048-bit DKIM key before it leaves our infrastructure. Recipients can verify the signature against our published DNS record — proving the email wasn't tampered with in transit.
DKIM is aligned to your sending domain, so DMARC passes through DKIM. Advanced mode also aligns SPF. You can publish a DMARC policy and reject all unauthenticated mail — your SecureSMTP mail will still pass.
If SecureSMTP is ever unavailable — planned maintenance, network blip, your API key revoked — WordPress's native mailer takes over automatically. No email is ever silently dropped. The plugin logs the fallback so you know it happened.
Each customer's site has its own quota window. If something on your site goes haywire (a buggy notification plugin, a brute-force form bot) and tries to send 10,000 emails in 5 minutes, we throttle it before reputation damage spreads to other customers on the platform.
All five layers ship on every plan — including the free one. Reliability isn't a paywalled feature.
Apples-to-apples comparison with the three most-installed WordPress SMTP plugins.
| Feature | SecureSMTP | WP Mail SMTP | Post SMTP | FluentSMTP |
|---|---|---|---|---|
| Setup time | A few min + DNS | 15–60 min | 15–60 min | 15–60 min |
| Works with every form plugin | Mail only | Mail only | Mail only | |
| Email log dashboard | Pro only | |||
| DKIM signing built-in | DIY config | DIY config | DIY config | |
| Fail-safe fallback to native | — | — | — | |
| Bot / spam classifier | — | — | — | |
| Free tier | 5,000/mo, all features | Limited | ||
| Cost (paid) | $7+/mo | $49+/yr | Free | Free |
Comparison reflects each vendor’s default behaviour as of 2026-06. Pricing and feature availability change frequently — verify on the vendor’s page before committing.
Small businesses, owner-operated sites, and solo founders who can’t afford to lose a single form lead.
Want your logo here? Email [email protected] — we’ll add it after a written-consent step.
One flat price per plan covers everything: hosted forms and email relay. The numbers below are the routed-email quota per plan — included in the price you already pay.
Free
$0 /mo
For solo sites and side projects.
Email relay
5k
routed emails / month
Starter
$7 /mo
or $5/mo billed yearly
For small businesses sending real volume.
Email relay
50k
routed emails / month
Pro
$19 /mo
or $15/mo billed yearly
For growing teams with multiple brands.
Email relay
250k
routed emails / month
Business
$49 /mo
or $39/mo billed yearly
For agencies and high-volume senders.
Email relay
1,000k
routed emails / month
Every paid plan has a 14-day free trial — no credit card required.
The ten questions we hear most before someone flips Email Delivery on.
Install SecureSMTP, add your sending domain, flip Email Delivery on once it is verified, then get back to building your site. A few minutes plus DNS time, no credit card.
Free tier · 5,000 routed emails / month · all 5 reliability layers included.