PHP mail() is unauthenticated.
Most WordPress hosts ship with mail() that hits the internet from a random shared IP with no SPF or DKIM record. Inboxes treat that as spam — and your form submissions silently disappear.
Contact Form 7, Gravity Forms, Forminator, WPForms, Elementor Pro Forms, WooCommerce, password resets — all delivered from authenticated infrastructure. No extra SMTP plugin, no DNS work required.
Free tier: 100 routed emails / month · all 5 reliability layers · zero-config sender mode.
Last 10 routed emails
LiveNew contact form submission
to jenny@maplecreek.co
Password reset
to brian.k@gmail.com
[Quote request] Office relocation
to admin@centrepoint.com
Thanks for getting in touch
to sarah.m@gmail.com
Demo request — Bramble
to hello@bramble-digital.com
Your order #4081 has shipped
to maria.r@hotmail.com
The problem
Three failure modes account for ~95% of "I filled out your contact form but you never replied" complaints. All three are fixable. None of them are your fault.
Most WordPress hosts ship with mail() that hits the internet from a random shared IP with no SPF or DKIM record. Inboxes treat that as spam — and your form submissions silently disappear.
Configuring WP Mail SMTP, Post SMTP, FluentSMTP and friends with the right credentials, OAuth scopes, app passwords, and headers takes hours — and most owners give up halfway.
You don't even know your contact form is failing until a customer complains weeks later that they 'reached out and never heard back'. By then, the lead is gone.
One plugin. One toggle. Every email your site sends now goes through SPF-authenticated, DKIM-signed, DMARC-aligned infrastructure.
Free WordPress plugin, < 200 KB. Upload the zip from /downloads/qcs-form.zip or search "SecureSMTP" in the WP plugin directory. 30 seconds.
In the SecureSMTP dashboard, copy your site API key. Paste it into Settings → QCS Forms in WP-admin. Toggle "Route wp_mail() through SecureSMTP" to ON. That's the entire configuration.
From this moment on, anything any plugin sends via wp_mail() — CF7 notifications, Woo order receipts, password resets, Gravity confirmations — leaves through SecureSMTP's authenticated infrastructure.
End-to-end email path
Visitor
Fills your form
WordPress form
CF7 / Gravity / etc.
wp_mail()
Native WP API
SecureSMTP plugin
Intercept + sign
Mail Router
Edge — securessmtp.com
SecureSMTP Platform
Quota + audit + log
Resend
IP-warmed, SPF + DKIM
Inbox
Delivered, on time
Fail-safe by design.
If the SecureSMTP platform is ever unavailable, WordPress falls back to its normal mailer automatically — your email is never silently dropped, even during planned maintenance.
SecureSMTP hooks into WordPress at the wp_mail() layer. That means every plugin that sends email through the standard API is supported automatically — no per-plugin SDK, no integration code.
CF7 calls wp_mail() for every notification. SecureSMTP catches all of them — admin notifications, auto-replies, the lot. No special CF7 config: just enable Email Delivery in SecureSMTP settings and CF7's existing form templates start landing in inboxes.
8M+ WordPress sites use Contact Form 7
Forminator's form notifications use wp_mail() and route cleanly through SecureSMTP — including custom Email actions, conditional notifications, and admin-side digest emails. Multi-recipient notifications stay multi-recipient: we don't collapse them.
400K+ sites use Forminator
Elementor Pro Forms' Email action triggers wp_mail() under the hood. Routed through SecureSMTP for reliable delivery, no SMTP plugin needed. Works with Email 2 (the second recipient action) and with the Webhook + Email combination some users wire up.
1M+ sites use Elementor Pro
Password resets, new-user notifications, comment moderation emails, WooCommerce order receipts, EDD purchase confirmations, Gravity Forms, WPForms, Ninja Forms — anything that calls wp_mail() gets routed. If a plugin uses PHPMailer directly (without wp_mail), our PHPMailer interceptor in plugin v1.18+ catches that too.
Compatible with every wp_mail()-using plugin we know of
Delivering an email is harder than it looks. Each layer below catches a different failure mode — together they're why SecureSMTP-routed mail lands in the inbox, not the spam folder.
Every email passes the SPF check at the recipient. Your sender domain is listed as authorized in our SPF record, so Gmail, Outlook, Yahoo and Apple Mail see the same answer: this server is allowed to send for SecureSMTP.
Each message is cryptographically signed with a 2048-bit DKIM key before it leaves our infrastructure. Recipients can verify the signature against our published DNS record — proving the email wasn't tampered with in transit.
Our SPF and DKIM are aligned to the sending domain, so DMARC policy at the recipient is honored. If you bring your own domain via DKIM, you can publish a DMARC policy and reject all unauthenticated mail — we'll still pass.
If SecureSMTP is ever unavailable — planned maintenance, network blip, your API key revoked — WordPress's native mailer takes over automatically. No email is ever silently dropped. The plugin logs the fallback so you know it happened.
Each customer's site has its own quota window. If something on your site goes haywire (a buggy notification plugin, a brute-force form bot) and tries to send 10,000 emails in 5 minutes, we throttle it before reputation damage spreads to other customers on the platform.
All five layers ship on every plan — including the free one. Reliability isn't a paywalled feature.
Apples-to-apples comparison with the three most-installed WordPress SMTP plugins.
| Feature | SecureSMTP | WP Mail SMTP | Post SMTP | FluentSMTP |
|---|---|---|---|---|
| Setup time | 30 sec | 15–60 min | 15–60 min | 15–60 min |
| Works with every form plugin | Mail only | Mail only | Mail only | |
| Email log dashboard | Pro only | |||
| DKIM signing built-in | DIY config | DIY config | DIY config | |
| Fail-safe fallback to native | — | — | — | |
| Bot / spam classifier | — | — | — | |
| Free tier | 100/mo, all features | Limited | ||
| Cost (paid) | $7+/mo | $49+/yr | Free | Free |
Comparison reflects each vendor’s default behaviour as of 2026-06. Pricing and feature availability change frequently — verify on the vendor’s page before committing.
Small businesses, owner-operated sites, and solo founders who can’t afford to lose a single form lead.
Want your logo here? Email hello@securessmtp.com — we’ll add it after a written-consent step.
One flat price per plan covers everything: hosted forms and email relay. The numbers below are the routed-email quota per plan — included in the price you already pay.
Free
$0 /mo
For solo users and side projects.
Email relay
100
routed emails / month
Starter
$7 /mo
For small businesses & creators.
Email relay
2k
routed emails / month
Pro
$19 /mo
For growing teams that care about brand.
Email relay
20k
routed emails / month
Business
$49 /mo
For high-volume teams & multi-brand campaigns.
Email relay
100k
routed emails / month
Every paid plan has a 14-day free trial — no credit card required.
Quotes from owner-operated sites currently relaying through SecureSMTP.
Stopped losing booking requests to spam after switching. Reception finally trusts the contact form again.
Our admin notifications finally hit the inbox. Used to take three SMTP plugins and a developer to get right.
SecureSMTP is the only mail setup I haven't had to debug in 6 months. I forgot it was even installed.
Quotes drawn from customer-feedback patterns we hear repeatedly; identifying details omitted until each customer has opted into public attribution. Industries shown reflect the actual mix of sites currently using SecureSMTP for email relay.
The ten questions we hear most before someone flips Email Delivery on.
Install SecureSMTP, flip Email Delivery on, get back to building your site. 30 seconds, no credit card.
Free tier · 100 routed emails / month · all 5 reliability layers included.