Email Delivery

Reliable WordPress email — for every form plugin you already use.

Contact Form 7, Gravity Forms, Forminator, WPForms, Elementor Pro Forms, WooCommerce, password resets — all delivered from authenticated infrastructure. No extra SMTP plugin, and one DNS record for your sending domain.

Free tier: 5,000 routed emails / month · all 5 reliability layers · 1 sending domain of your own.

securessmtp.com/app/forms/email-log

Last 10 routed emails

Live
CF7

New contact form submission

to [email protected]

Sent
WP Core

Password reset

to [email protected]

Sent
Gravity

[Quote request] Office relocation

to [email protected]

Sent
Forminator

Thanks for getting in touch

to [email protected]

Sent
Elementor

Demo request — Bramble

to [email protected]

Sent
WooCommerce

Your order #4081 has shipped

to [email protected]

Sent
Authenticated · DKIM alignedvia SecureSMTP MTA
14+
Sites already relaying
across multiple industries
5
Layers of reliability
authentication + abuse defense
Minutes
Setup with our WP plugin
plus DNS time for your domain
99.9%
Deliverability target
our own mail servers

The problem

Why your WordPress forms go to spam.

Three failure modes account for ~95% of "I filled out your contact form but you never replied" complaints. All three are fixable. None of them are your fault.

PHP mail() is unauthenticated.

Most WordPress hosts ship with mail() that hits the internet from a random shared IP with no SPF or DKIM record. Inboxes treat that as spam — and your form submissions silently disappear.

SMTP plugins are a maze.

Configuring WP Mail SMTP, Post SMTP, FluentSMTP and friends with the right credentials, OAuth scopes, app passwords, and headers takes hours — and most owners give up halfway.

Bad delivery silently loses leads.

You don't even know your contact form is failing until a customer complains weeks later that they 'reached out and never heard back'. By then, the lead is gone.

From install to delivered email in a few minutes, plus DNS time.

One plugin. One toggle. One domain. Once your domain is verified, every email your site sends goes through DKIM-signed, DMARC-aligned infrastructure.

  1. 01

    Install the SecureSMTP plugin

    Free WordPress plugin, < 200 KB. Upload the zip from /downloads/securessmtp.zip.

  2. 02

    Paste your API key

    In the SecureSMTP dashboard, copy your site API key. Paste it into SecureSMTP → Settings in WP-admin. Leave "Route outgoing email through SecureSMTP" off for now.

  3. 03

    Add your sending domain and its DNS records

    Open Sending domains in the SecureSMTP dashboard, add your domain and publish the DNS records it shows: one DKIM record in Simple mode, three records in Advanced mode. DNS takes a few minutes to publish, sometimes longer. Until the domain is verified, a new account can send up to 10 test emails a day to its own address.

  4. 04

    Once verified, switch Email Delivery on

    When your domain shows as verified, toggle "Route outgoing email through SecureSMTP" to ON. Anything any plugin sends via wp_mail() — CF7 notifications, Woo order receipts, password resets, Gravity confirmations — then leaves through SecureSMTP's authenticated infrastructure, signed with your domain.

End-to-end email path

Visitor

Fills your form

WordPress form

CF7 / Gravity / etc.

wp_mail()

Native WP API

SecureSMTP plugin

Intercept + sign

Mail Router

Edge — securessmtp.com

SecureSMTP Platform

Quota + audit + log

SecureSMTP MTA

DKIM-signed, DMARC aligned

Inbox

Delivered, on time

Fail-safe by design.

If the SecureSMTP platform is ever unavailable, WordPress falls back to its normal mailer automatically — your email is never silently dropped, even during planned maintenance.

Works with every form plugin — no special config

SecureSMTP hooks into WordPress at the wp_mail() layer. That means every plugin that sends email through the standard API is supported automatically — no per-plugin SDK, no integration code.

CF7

Contact Form 7

CF7 calls wp_mail() for every notification. SecureSMTP catches all of them — admin notifications, auto-replies, the lot. No special CF7 config: verify your sending domain, then enable Email Delivery in SecureSMTP settings, and CF7's existing form templates start landing in inboxes.

  • Install SecureSMTP plugin · activate
  • Paste API key
  • Add your sending domain and publish its DNS records (Sending domains in the dashboard)
  • Flip Email Delivery to ON once the domain shows as verified
  • Submit a CF7 form to verify (the row appears in the Mail Log)

8M+ WordPress sites use Contact Form 7

FORM

Forminator

Forminator's form notifications use wp_mail() and route cleanly through SecureSMTP — including custom Email actions, conditional notifications, and admin-side digest emails. Multi-recipient notifications stay multi-recipient: we don't collapse them.

  • Install SecureSMTP plugin · activate
  • Paste API key
  • Add your sending domain and publish its DNS records (Sending domains in the dashboard)
  • Flip Email Delivery to ON once the domain shows as verified
  • Forminator forms keep working — now from authenticated infrastructure

400K+ sites use Forminator

ELEM

Elementor Pro Forms

Elementor Pro Forms' Email action triggers wp_mail() under the hood. Routed through SecureSMTP for reliable delivery, no SMTP plugin needed. Works with Email 2 (the second recipient action) and with the Webhook + Email combination some users wire up.

  • Install SecureSMTP plugin · activate
  • Paste API key
  • Add your sending domain and publish its DNS records (Sending domains in the dashboard)
  • Flip Email Delivery to ON once the domain shows as verified
  • Elementor form Email actions now use SecureSMTP automatically

1M+ sites use Elementor Pro

CORE

WordPress core + everything else

Password resets, new-user notifications, comment moderation emails, WooCommerce order receipts, EDD purchase confirmations, Gravity Forms, WPForms, Ninja Forms — anything that calls wp_mail() gets routed. If a plugin uses PHPMailer directly (without wp_mail), our PHPMailer interceptor in plugin v1.18+ catches that too.

  • Install SecureSMTP plugin · activate
  • Paste API key
  • Add your sending domain and publish its DNS records (Sending domains in the dashboard)
  • Flip Email Delivery to ON once the domain shows as verified
  • Use any combination of plugins — they all route through SecureSMTP

Compatible with every wp_mail()-using plugin we know of

Defense in depth

Five layers of reliability — not just one trick.

Delivering an email is harder than it looks. Each layer below catches a different failure mode — together they're why SecureSMTP-routed mail lands in the inbox, not the spam folder.

Layer 01

SPF authentication

In Simple mode you publish one DKIM record and no SPF record, and DMARC passes through DKIM. In Advanced mode you also add an MX and an SPF record on a bounce subdomain, so SPF aligns to your domain too. You do not add a SecureSMTP SPF include to your own SPF record.

Layer 02

DKIM signing

Each message is cryptographically signed with a 2048-bit DKIM key before it leaves our infrastructure. Recipients can verify the signature against our published DNS record — proving the email wasn't tampered with in transit.

Layer 03

DMARC alignment

DKIM is aligned to your sending domain, so DMARC passes through DKIM. Advanced mode also aligns SPF. You can publish a DMARC policy and reject all unauthenticated mail — your SecureSMTP mail will still pass.

Layer 04

Fail-safe fallback

If SecureSMTP is ever unavailable — planned maintenance, network blip, your API key revoked — WordPress's native mailer takes over automatically. No email is ever silently dropped. The plugin logs the fallback so you know it happened.

Layer 05

Per-site rate limiting + abuse detection

Each customer's site has its own quota window. If something on your site goes haywire (a buggy notification plugin, a brute-force form bot) and tries to send 10,000 emails in 5 minutes, we throttle it before reputation damage spreads to other customers on the platform.

All five layers ship on every plan — including the free one. Reliability isn't a paywalled feature.

How SecureSMTP compares to the SMTP plugins you've heard of

Apples-to-apples comparison with the three most-installed WordPress SMTP plugins.

FeatureSecureSMTPWP Mail SMTPPost SMTPFluentSMTP
Setup timeA few min + DNS15–60 min15–60 min15–60 min
Works with every form pluginMail onlyMail onlyMail only
Email log dashboardPro only
DKIM signing built-inDIY configDIY configDIY config
Fail-safe fallback to native———
Bot / spam classifier———
Free tier5,000/mo, all featuresLimited
Cost (paid)$7+/mo$49+/yrFreeFree

Comparison reflects each vendor’s default behaviour as of 2026-06. Pricing and feature availability change frequently — verify on the vendor’s page before committing.

Trusted by 14+ WordPress sites across multiple industries

Small businesses, owner-operated sites, and solo founders who can’t afford to lose a single form lead.

Healthcare & wellnessReal estateHospitalityProfessional services

Want your logo here? Email [email protected] — we’ll add it after a written-consent step.

Fair pricing — no per-email markup.

One flat price per plan covers everything: hosted forms and email relay. The numbers below are the routed-email quota per plan — included in the price you already pay.

Starter

$7 /mo

or $5/mo billed yearly

For small businesses sending real volume.

Email relay

50k

routed emails / month

Start 14-day free trial
Most popular

Pro

$19 /mo

or $15/mo billed yearly

For growing teams with multiple brands.

Email relay

250k

routed emails / month

Start 14-day free trial

Business

$49 /mo

or $39/mo billed yearly

For agencies and high-volume senders.

Email relay

1,000k

routed emails / month

Start 14-day free trial
See full pricing

Every paid plan has a 14-day free trial — no credit card required.

Frequently asked

The ten questions we hear most before someone flips Email Delivery on.

  • Do I need a separate SMTP plugin alongside SecureSMTP?
    No. SecureSMTP catches everything wp_mail() does — every form notification, every password reset, every WooCommerce receipt. Installing WP Mail SMTP or Post SMTP alongside SecureSMTP isn't required and can cause conflicts.
  • What if I already have WP Mail SMTP installed?
    Disable it. SecureSMTP detects a competing SMTP plugin and shows a warning in WP-admin pointing you to the conflict. You can keep your old plugin around for a day or two to roll back, but for routing to work, one of them has to be in charge.
  • Does SecureSMTP work with Gravity Forms, Ninja Forms, and WPForms?
    Yes. Any plugin that uses wp_mail() — which is virtually all of them — is automatically routed through SecureSMTP as soon as Email Delivery is enabled. No per-plugin integration code or configuration is required.
  • What about plugins that bypass wp_mail()?
    Gravity Forms and most other form plugins send through wp_mail(), so they need nothing extra. A plugin that instantiates PHPMailer directly (skipping wp_mail) is caught by our PHPMailer interceptor in plugin v1.18+: we hook the send method and route the outbound message through SecureSMTP.
  • Can I send as my own domain (yourbusiness.com)?
    Yes — via DKIM setup, on every plan including Free (1 sending domain), and new accounts need it to send. You add a TXT record to your DNS and SecureSMTP signs outgoing email with your domain. Inboxes see the email coming from "you", not from SecureSMTP. Step-by-step guide is in the SecureSMTP dashboard under Sending domains.
  • What happens if SecureSMTP is ever down?
    Fail-safe fallback to WordPress's native PHP mail — your email is never silently dropped. The plugin logs the fallback so you know when it happened. Native delivery is less reliable than SecureSMTP, but it's strictly better than the email vanishing.
  • Do my emails count against my form-submission limit?
    No. Email Delivery has its own per-plan quota separate from form submissions. You can use one without the other — e.g. send only password resets through SecureSMTP without sending any form submissions through it.
  • Where do I see what's been routed?
    Two places: in WP-admin under SecureSMTP → Mail Log (last 200 messages, real-time), and on the SecureSMTP dashboard at securessmtp.com/app/forms/email-log (full history, searchable by recipient, subject, or status).
  • Is this faster than my host's SMTP?
    Yes, in most cases. Shared-hosting SMTP is often rate-limited and routed through cold IPs that mailbox providers down-score. We send from our own mail servers with SPF, DKIM and DMARC set up, bounce and complaint handling, and one-click unsubscribe headers — so deliverability is usually better, and latency is usually lower too.
  • What's the catch?
    None. The free tier is 5,000 routed emails / month, forever, plus 100 form submissions a month. Paid tiers exist only for higher volume; every reliability feature ships on the free tier too. If you outgrow the free quota, paid plans start at $7/mo.

Stop fighting WordPress email.

Install SecureSMTP, add your sending domain, flip Email Delivery on once it is verified, then get back to building your site. A few minutes plus DNS time, no credit card.

Free tier · 5,000 routed emails / month · all 5 reliability layers included.