The WordPress Email Authority
Direct answers to the WordPress email questions that actually come up: why password reset emails don’t arrive, why a contact form reaches Office 365 but not Gmail, whether to standardise SMTP across an agency’s client sites, what changes when a business moves from free Gmail to Workspace.
Set the “From Email” override in your mailer plugin (WP Mail SMTP, FluentSMTP, or Post SMTP) and enable “Force From Email” so plugins can’t override it. That covers ninety-nine percent of sites. Filter or dedicated plugin covers the rest.
Yes, via three paths depending on which emails you want to change. WooCommerce order emails have a template override system in the theme. Core WordPress emails are filterable but not templated. Anything else takes an HTML-email plugin.
DKIM and SPF are DNS records that let mailbox providers verify a WordPress site’s outbound mail is authorised to send as your domain. Neither is WordPress-specific; both are essential to any site whose email is expected to reach the inbox.
WordPress core sends notification emails by default for new users, password resets, comment approvals, and other events. If notifications are not arriving, the problem is almost always deliverability, not a WordPress setting.
Yes. Three routes exist. Your form plugin’s native CRM integration, the CRM vendor’s own WordPress plugin, or a general-purpose connector like Zapier or Make. Native integrations are the shortest path when the plugins line up.
Use a contact form plugin that supports a second notification email, and set that second notification to send to the submitter with your acknowledgement copy. Every mainstream form plugin either includes autoresponders or has an add-on that does.
Combine a bot filter (honeypot or Cloudflare Turnstile) with content filtering (Akismet or Antispam Bee). Every serious form plugin ships with hooks for both; turn them on before the form goes live rather than after the spam starts.
Install a contact form plugin, build a form in its editor, and drop the plugin’s block or shortcode onto the page where the form should appear. WordPress does not ship a contact form out of the box; a plugin is the standard route.
Yes, both personal Outlook.com and Microsoft 365 mailboxes work as WordPress SMTP relays, using different hosts and authentication. Microsoft 365 needs OAuth and hits daily send limits; personal Outlook.com is smaller and only for hobby sites.
Yes, and for any WordPress site that needs to send reliable email, a third-party sending service is the standard setup. The provider gives you an authenticated outbound pipeline; a mailer plugin routes wp_mail() through it.
Yes. Three DNS records on your domain (SPF, DKIM, and optionally DMARC) let a WordPress site send authenticated mail from an address on your own domain, through whichever transactional provider you configure. The records are published at your DNS host, not inside WordPress.
WordPress email fails for four distinct reasons. This diagnostic sorts between them and gives the fix for each, from the disabled mail() function on shared hosts through unauthenticated From addresses that Gmail treats as spam.
FluentSMTP for a free-tier default without upsell pressure. WP Mail SMTP for the most-installed, most-documented option with a Pro tier that many sites end up buying. Post SMTP for multi-site estates that need mobile alerting.
A mailer plugin paired with a transactional email provider. The plugin replaces WordPress’s default sending path; the provider gives you an authenticated pipeline that lands mail in the inbox.
WordPress calls wp_mail(), which hands off to PHPMailer, which by default calls PHP’s mail() function on the local server. Most operators replace that path with authenticated SMTP via a plugin.
Standardise SMTP across client sites by opening one transactional provider account per client, on the client’s domain, with credentials held by the agency.
WordPress password reset email fails for five distinct reasons. This diagnostic identifies which is causing the problem and gives the specific fix for each.
Gmail rejects unauthenticated mail; Microsoft 365 downgrades it to Junk. Here is why your form reaches Office 365 but not Gmail, and how to fix it.
Free Gmail at gmail.com is free. Google Workspace costs $7/user/month and adds custom-domain mail, higher SMTP limits, and admin controls. What changes for a WordPress site.
CF7 geo-blocking works via Cloudflare WAF, Wordfence Premium, or GeoIP plugins. For brand-confusion volume, a form-level filter usually works better.