WP Engine does not bundle mailboxes. WordPress’s outbound mail leaves through a built-in MailChannels relay by default. WP Engine recommends an SPF record for it but provides no DKIM key for the site’s domain, so DMARC alignment on the default path is unverified, and the platform enforces an hourly send cap that it deliberately does not publish. Outbound port 25 is blocked; the standard submission ports are open, so an SMTP plugin connects to an external relay directly. The headline trade-off is editorial as much as it is technical: WP Engine’s own documentation states the bundled relay is built for password resets and “will not support a full email campaign,” and the platform itself recommends a third-party provider for anything past incidental volume.
The entry Managed WordPress plan, now called Essential, is listed at $28/month on annual billing ($336 upfront), a first-year promotional price for new customers; month-to-month it is $35. WP Engine does not show the renewal rate on its plans page. Business starts at $400/month billed annually (sales-assisted); Enterprise is custom. WP Engine retired the public Startup/Professional/Growth/Scale ladder during 2026 in favour of the Essential/Business/Enterprise tiering. WP Engine sits at the premium end of managed WordPress hosting, alongside Kinsta and well above shared hosts like SiteGround and Bluehost.
Email on WP Engine
How wp_mail works by default
A fresh WordPress install on WP Engine sends mail through MailChannels rather than the local server, with no SMTP plugin to install and no relay credentials to add. WordPress core hands the message to wp_mail(), which on this host is wired to ship outbound through WP Engine’s MailChannels integration. Password resets, user-registration notifications, and comment-moderation alerts leave through this path without configuration.
The detail to plan around is the hourly send cap. WP Engine’s 
own documentation states that “to ensure server stability we impose a hard limit on the amount of emails that can be sent in an hour” and that “in order to prevent abuse of this limit, we will not share the exact amount.” The same page calls the bundled mail “limited” and steers any operator with non-incidental traffic toward a third-party relay. That is unusual phrasing for a host’s marketing surface: WP Engine is the platform that most clearly tells customers its bundled email is not the answer, and most clearly leaves the SMTP ports open so the answer is a plugin install.
Outbound SMTP port status
| Port | Status | Protocol |
|---|---|---|
| 25 | Blocked | SMTP (legacy); blocked by WP Engine’s infrastructure providers |
| 465 | Open | SMTPS (implicit TLS) |
| 587 | Open | SMTP with STARTTLS; standard submission port for external relays; required for Microsoft 365 |
| 2525 | Open | SMTP (alternate); WP Engine’s own documentation calls this the recommended choice |
| 993 | Blocked | IMAPS (incoming); no relevance without bundled mailboxes |
| 995 | Blocked | POP3S (incoming); no relevance without bundled mailboxes |
Outbound port 25 is closed; the three modern submission ports (465, 587, 2525) are all open. WP Engine’s own documentation calls out port 2525 as the recommended choice and port 587 specifically for Microsoft 365. Any WordPress SMTP plugin that supports authenticated submission (WP Mail SMTP, FluentSMTP, Post SMTP) connects to external services like Postmark and SMTP2GO without trouble. The IMAP/POP3 ports being blocked is consistent with WP Engine not bundling mailboxes: there is no inbound mail to read.
Sending limits
WP Engine enforces an hourly outbound cap on the MailChannels relay and does not publish the figure. The policy phrasing is: enough headroom for routine transactional output (password resets, registration notifications, the occasional WooCommerce order on a low-traffic site), explicitly not enough headroom for “a full email campaign” or notification-heavy plugins firing on every user interaction. The result is that an operator with any meaningful volume has no number to plan against, which is by design.
The limit is enough to send a functional amount of emails such as password resets, but will not support a full email campaign.
The practical consequence: any site that fits one of the “relay is needed” conditions below is also a site that should not try to discover the limit empirically. SiteGround publishes 400-or-800-per-hour numbers; Kinsta publishes 150-or-1,000-or-3,000-per-day numbers; WP Engine’s choice not to publish is itself a recommendation to route mail off the bundled relay before traffic matters.
Mailboxes, forwarding, DNS
WP Engine does not bundle email hosting. There are no mailboxes at [email protected], no IMAP or POP3, no webmail interface, and no forwarding rules. Domain email at WP Engine is always an external arrangement. Practical options: 
Google Workspace or Microsoft 365 for full mailboxes; Fastmail for an independent mailbox provider; or a forwarding service (ImprovMX, Forward Email) when the domain only needs to receive at a few addresses without full inboxes.
WP Engine does not host DNS. Its email-records guidance says so directly, and adds that it “cannot configure SPF records on your behalf.” SPF, DKIM, and DMARC records go in at whichever provider hosts the domain’s DNS (Cloudflare is the common one).
Authentication (SPF, DKIM, DMARC)
WP Engine provides no DKIM key for the default path. Its email-records guidance says support “cannot assist you in finding the proper value for this record or in storing the private key for mail relay services,” and its sending article says WP Engine “does not provide MX or DKIM records.” Neither page says whether MailChannels signs the mail, or under whose domain, so treat default-path mail as unsigned for the site’s domain until a test send shows otherwise: send a wp_mail() to a Gmail address and read the Authentication-Results header for dkim=pass with header.d= set to the site’s own domain. A third-party relay layered on top brings its own DKIM, which the operator publishes at the DNS host.
SPF (the DNS record listing which servers are authorised to send mail under the domain) is not auto-published. WP Engine recommends adding the MailChannels include (relay.mailchannels.net) to any existing SPF record. A third-party relay needs its own include in the same record only if it sends with the site’s root domain as the envelope sender. Postmark uses its own Return-Path and needs none, and Mailgun’s SPF sits on the sending subdomain.
An SPF pass is not the same as DMARC alignment: SPF aligns only when the envelope sender is on the site’s domain, and WP Engine does not document the envelope sender MailChannels uses. DMARC is the operator’s call. WP Engine publishes guidance on adding _dmarc records but does not publish a policy for you. p=none with a rua= reporting address is the safe position on the default path. Tightening to p=quarantine or p=reject belongs only after aggregate reports show the bundled path’s mail passing aligned SPF or DKIM for the site’s domain; WP Engine documents neither. A domain that already enforces DMARC should send WordPress mail through a third-party relay that signs as the domain.
Where a third-party relay does send with the root domain as envelope sender, its include and the MailChannels include go together in one SPF string. The SPF merger folds include:relay.mailchannels.net alongside the relay’s include and counts the DNS lookups against RFC 7208’s ten-lookup ceiling before publish. Once the record is live, the DNS auth checker reads how the domain’s SPF, DKIM, and DMARC resolve from the receiver’s perspective, so a stale nameserver or a missed include shows up before real traffic does.
What WP Engine does not provide
- Documented DKIM or DMARC alignment. WP Engine recommends an SPF include for the bundled relay and provides no DKIM key. Nothing in its documentation says the default path’s mail is signed as the site’s domain.
- A disclosed hourly limit. The cap exists but is not published. Sites planning around the bundled path have no number to plan against. The policy answer is to plan around a third-party relay instead.
- Mailboxes at the hosted domain. No inboxes, no webmail, no IMAP or POP3. Fastmail, Google Workspace, or a forwarding service (ImprovMX, Forward Email) fills the gap.
- Per-message delivery logs and bounce tracking. WP Engine surfaces nothing about what was sent, what bounced, or what hit spam on the bundled path. A relay with webhook delivery events (Postmark, Mailgun) is the way to get that visibility.
- Marketing or bulk email allowance. The bundled mail is explicitly transactional only. A dedicated marketing platform (Mailchimp, MailerLite, ConvertKit) is the route for broadcast traffic.
- A dedicated sending IP on the default path. MailChannels’ relay shares IP reputation across many tenants. Sites where deliverability isolation matters need a relay with a dedicated-IP add-on (Postmark once sending reaches 300,000 emails a month; Mailgun on its 100,000-a-month plans and up).
When a third-party relay is needed
WP Engine answers this in its own documentation: the relay is the default expectation, not an optional add-on for edge cases. Sites that send only the occasional password reset can sit on the bundled MailChannels path; everything else moves up to a relay before traffic does.
The specific conditions that argue for a dedicated relay:
- Your domain enforces DMARC. At
p=quarantineorp=reject, mail that does not pass aligned SPF or DKIM goes to spam or is refused, and WP Engine documents neither for the bundled path. A relay that signs as the domain passes DMARC on DKIM alone. - Anything beyond incidental transactional volume. Any site sending more than a handful of A transactional email is the automated message a WordPress site sends in response to a single user action – a password reset, an order confirmation, a form receipt – addressed to the user who triggered it. Read full reference → an hour. The bundled cap is undisclosed; the editorial recommendation is to move off the relay before discovering it. Postmark is the cleanest fit for transactional under 100,000 a month; SMTP2GO is the cheapest credible option at low volumes; Mailgun is where higher volumes make economic sense.
- A missed email has a real cost. Password resets that arrive late, order confirmations that vanish into spam, registration notifications that the new user never sees, all roll up to churn. A dedicated relay is the only path that exposes the data needed to confirm those messages landed.
- Delivery visibility is required. Per-message delivery, bounce, and complaint events arrive as webhooks from Postmark, Mailgun, and SMTP2GO, with searchable logs and aggregate dashboards. The bundled WP Engine path produces none of this.
- The site needs marketing or newsletter sending. The bundled policy excludes broadcast traffic. A marketing platform (Mailchimp, ConvertKit, MailerLite) handles the campaign side; a dedicated transactional relay handles the transactional side.
Because WP Engine keeps 465, 587, and 2525 open, an SMTP plugin connects to any of the providers above without an API-only constraint. SMTP is simpler to set up; an HTTP API takes port policy out of the question. Both work.
Verdict
WP Engine is the right pick for managed WordPress sites whose operators already plan to run a third-party SMTP relay from day one, and who want a host whose policy assumes that. The MailChannels-backed default mail covers password resets, the open submission ports keep the relay swap path clean, and WP Engine’s own documentation steers any operator past incidental volume to a relay rather than dressing the bundled mail up as something it is not. The trade-off is candor doubled with the no-mailbox stance: a brand that needs full domain email and a reliable transactional path will end up paying for a relay and a mailbox provider on top of the hosting bill, and that bill is at the premium end of the category. For the WordPress email setup that supplements WP Engine’s default path, see how to configure WordPress email.
Corrections
- 2026-10-29: an earlier version said WP Engine’s default path is DKIM-signed automatically, that the MailChannels SPF include makes it pass SPF alignment, and that WP Engine hosts DNS. WP Engine provides no DKIM key for the default path, documents no alignment, and states that it does not host DNS.
- 2026-10-29: an earlier version called WP Engine the largest host in the category by install count, which we could not source, and gave the $28/month promotional price as the renewal price.