A modern SMTP and email log plugin for WordPress. Improve deliverability via SMTP, Gmail, Resend, Amazon SES, or SendLayer.

Marco van Wieren

edwardcross

WPO365 | Mail Integration for Office 365 / Outlook

IMPORTANT - Please choose the WPO365 | MICROSOFT 365 GRAPH MAILER plugin instead. This plugin is no longer supported and does not receive updates.

Vinod Ram

VR SMTP Mailer

SMTP or Microsoft Graph OAuth mail for WordPress. Full wp_mail replacement with logging, queue, and SMTP/email test tools.

NimblyMail

<p>NimblyMail is a comprehensive SMTP and email logging plugin designed to fix WordPress email deliverability issues. By default, WordPress uses the unreliable PHP <code>mail()</code> function, which often causes emails to land in the spam folder or never deliver. NimblyMail solves this by reconfiguring WordPress to securely route your site’s emails through a proper SMTP server or dedicated email provider.</p>
<p>Whether you need to connect via a standard SMTP host, Gmail OAuth, Microsoft 365 OAuth, Amazon SES, Resend, SendLayer, Brevo, or ZeptoMail, NimblyMail ensures your emails reach the inbox. Plus, with comprehensive email logging, a background queue, a developer sandbox, and an automated deliverability audit, you get full delivery monitoring and one-click troubleshooting.</p>
<h4>At a glance</h4>
<ul>
<li>Nine email providers — SMTP, Gmail OAuth, Outlook / Microsoft 365 OAuth, Amazon SES, Resend, SendLayer, Brevo, ZeptoMail, and PHP mail.</li>
<li><strong>Free Email Logging</strong> — Comprehensive log with search, status filters, and one-click resend of failed emails.</li>
<li><strong>Background Queue</strong> — Defer wp_mail() calls to a non-blocking queue powered by Action Scheduler, with three-tier priority, exponential backoff retries, and admin tools to retry or cancel pending mail.</li>
<li><strong>Developer Sandbox</strong> — Stop staging and local environments from sending real email. Choose Log Only (capture and short-circuit) or Redirect (rewrite every recipient to a single safe address). Optional allowlist for addresses that should bypass the sandbox.</li>
<li><strong>Deliverability Health Audit</strong> — Automated DNS-based audit of SPF, DKIM, DMARC, and PTR for the active sender domain, with scheduled checks and human-readable findings per pillar.</li>
<li><strong>Clean, Modern Dashboard</strong> — Delivery stats, connection health, queue health widget, deliverability summary, and recent activity at a glance.</li>
<li>Selectively disable WordPress notification emails across 8 categories (over 25 individual triggers).</li>
<li>Failure alerts delivered via PHP’s native <code>mail()</code> so a broken transport can’t silence them.</li>
<li>AES-256-CBC credential encryption with optional PHP-constant overrides in wp-config.php.</li>
<li>First-class WordPress Multisite support with network defaults, per-site overrides, and per-field locks.</li>
<li>Guided setup wizard with auto-detection and one-click import from existing SMTP plugins.</li>
</ul>
<h4>Supported Email Providers</h4>
<ul>
<li><strong>Other SMTP</strong> — Connect to any SMTP server (Outlook, Office 365, Mailgun, SendGrid, Zoho, etc.)</li>
<li><strong>Gmail / Google Workspace</strong> — Authenticate securely via Google OAuth without managing your own Google Cloud credentials.</li>
<li><strong>Outlook / Microsoft 365</strong> — Authenticate via Microsoft OAuth and send through <code>smtp.office365.com</code> without registering your own Azure application.</li>
<li><strong>Amazon SES</strong> — Send via AWS Simple Email Service</li>
<li><strong>Resend</strong> — Modern email API for developers</li>
<li><strong>SendLayer</strong> — Transactional email delivery service</li>
<li><strong>Brevo</strong> — Transactional email API (formerly Sendinblue)</li>
<li><strong>ZeptoMail</strong> — Zoho’s transactional email service with regional endpoints</li>
<li><strong>Default (PHP)</strong> — Fallback to the built-in PHP mail function</li>
</ul>
<h4>Email Logging</h4>
<p>Every outgoing email is logged with recipient, subject, status, headers, and optional body capture. Search and filter logs by status (sent, failed, pending), resend failed emails with one click, and view full message details in a modal preview.</p>
<h4>Background Queue</h4>
<p>Turn the queue on under NimblyMail > Settings > Mail Queue and every wp_mail() call returns immediately. Messages are persisted to a database queue, dispatched by Action Scheduler in priority order (high / normal / bulk), and retried with exponential backoff on transient failures. Attachments are staged on enqueue so request-scoped tmp files cannot break delayed delivery. The Queue admin screen lists pending and failed items with retry / cancel actions, and the dashboard surfaces a queue-health widget. Test emails and admin alerts continue to send synchronously by default so you always get immediate feedback.</p>
<h4>Developer Sandbox</h4>
<p>Working on a staging copy or local clone? Turn on the sandbox to guarantee no real customer ever receives an accidental email. Pick <strong>Log Only</strong> to capture and short-circuit every wp_mail() call so they show up in the Email Log without leaving the host, or <strong>Redirect</strong> to rewrite every recipient to a single safe address with the originals preserved in <code>X-NimblyMail-Original-*</code> headers and a configurable subject prefix. An allowlist (exact email or <code>*@domain.com</code>) lets through addresses you do want delivered for testing. Sandboxing is settings-driven, switchable from the Network Admin on multisite, and visible at a glance via an admin-bar badge.</p>
<h4>Deliverability Health Audit</h4>
<p>NimblyMail runs an automated DNS audit of the active sender domain on a schedule (and on demand) and surfaces the result on the Deliverability page and the dashboard. The audit covers four pillars — SPF, DKIM, DMARC, and PTR — and is mailer-aware: required SPF includes and DKIM selectors are sourced from whichever provider you have configured (Gmail, Outlook 365, SES, etc.), with skip explanations for cases where a check does not apply. Findings are human-readable: each pillar shows pass/warn/fail with a one-line reason and a link to the relevant provider documentation.</p>
<h4>Email Controls</h4>
<p>Selectively disable WordPress notification emails you don’t need — comment notifications, password reset emails, new user registrations, automatic update notices, and more. Over 25 individual email types across 8 categories can be toggled on or off.</p>
<h4>Failure Alerts</h4>
<p>Receive instant alerts when emails fail to deliver. Configure alert recipients with optional CC and BCC addresses. Alerts are sent via PHP’s native mail function to bypass the broken transport.</p>
<h4>Security</h4>
<p>Credentials (SMTP passwords, API keys) are encrypted at rest using AES-256-CBC with HMAC-SHA256 verification. Settings can be locked via PHP constants in wp-config.php, making sensitive fields read-only in the admin UI.</p>
<h4>Settings Import</h4>
<p>Migrating from another SMTP plugin? NimblyMail automatically detects existing SMTP-plugin configurations and offers one-click import through the setup wizard.</p>
<h4>WordPress Multisite</h4>
<p>First-class multisite support. Network-activate the plugin once and every sub-site inherits the network defaults until a site admin explicitly overrides a field. Super admins get a Network Admin <span aria-hidden="true" class="wp-exclude-emoji">→</span> NimblyMail surface with an aggregated dashboard, a sites table, per-field locks, and a per-site override editor.</p>
<h4>Clean Dashboard</h4>
<p>Built with Vue 3 and Ant Design, the dashboard is fast, responsive, and designed to feel native to WordPress. A guided setup wizard helps you configure everything in minutes, while the main dashboard provides a clear overview of your email delivery health.</p>
<h3>Development and source code</h3>
<p>The complete, human-readable source code for NimblyMail is maintained in the public WordPress.org SVN repository for this plugin. Browse it directly in your web browser via the Trac UI:</p>
<ul>
<li><strong>Browse source:</strong> https://plugins.trac.wordpress.org/browser/nimblymail-smtp/trunk/</li>
<li><strong>SVN checkout:</strong> <code>svn checkout https://plugins.svn.wordpress.org/nimblymail-smtp/trunk/ nimblymail-smtp</code></li>
</ul>
<p>The repository <code>trunk/</code> directory contains:</p>
<ul>
<li><code>src/</code> — the PHP backend (PSR-4 autoloaded, plain readable PHP).</li>
<li><code>apps/</code> — the Vue 3 + TypeScript single-page apps (Dashboard, Settings, Email Logs, Tools, Setup Wizard, Network Admin) that get compiled into the minified bundles under <code>dist/</code>.</li>
<li><code>package.json</code>, <code>package-lock.json</code>, <code>tsconfig.json</code>, <code>tsconfig.node.json</code>, <code>vite.config.ts</code> — the build configuration needed to reproduce the exact <code>dist/</code> bundles.</li>
<li>The current <code>dist/</code> build output plus per-bundle source-map files (<code>*.js.map</code>, <code>*.css.map</code>).</li>
</ul>
<p>The minified JavaScript and CSS files under <code>dist/</code> are produced from the Vue/TypeScript sources under <code>apps/</code> using Vite. To rebuild them yourself from a <code>trunk/</code> checkout:</p>
<ol>
<li>From the plugin directory, run <code>composer install</code> to install PHP dependencies (PSR-4 autoloader + Action Scheduler).</li>
<li>Run <code>npm install</code> to install the JavaScript build dependencies declared in <code>package.json</code>.</li>
<li>Run <code>npm run build</code> to regenerate the <code>dist/</code> bundle from the <code>apps/</code> sources. For local development with hot-module replacement, run <code>npm run dev</code> (Vite dev server) after adding <code>define( 'HMR_DEV', 'nimblymail-smtp' );</code> to your <code>wp-config.php</code>.</li>
</ol>
<h4>How files under `dist/` map to readable source</h4>
<p>Inside the SVN <code>trunk/</code>, every minified JavaScript and CSS file under <code>dist/</code> is accompanied by a <code>.map</code> source-map file (e.g. <code>dist/dashboard.<hash>.js</code> ships with <code>dist/dashboard.<hash>.js.map</code>). The source map fully describes how each minified file was produced from the readable Vue / TypeScript files under <code>apps/</code>, and any modern browser DevTools panel or build tool can use it to inspect the original source line-by-line. The high-level mapping is:</p>
<ul>
<li><code>dist/<entry>.<hash>.js</code> — the entry-point bundle for one of the admin apps. Direct source: <code>apps/<entry>/index.ts</code> (e.g. <code>dist/dashboard.<hash>.js</code> comes from <code>apps/dashboard/index.ts</code>). Entry names are: <code>dashboard</code>, <code>settings</code>, <code>email-logs</code>, <code>queue</code>, <code>tools</code>, <code>wizard</code>, <code>deliverability</code>, <code>network-sites</code>, <code>network-dashboard</code>.</li>
<li><code>dist/chunks/<name>.<hash>.js</code> — shared chunks auto-emitted by Vite/Rollup whenever a module is imported by two or more entry points. They contain no plugin-specific code that is not also visible in the readable sources under <code>apps/</code> (and in <code>node_modules/</code> for upstream dependencies like Vue, Ant Design Vue, Vue Router, and Pinia). The <code>dist/chunks/AppHeader.<hash>.js</code> chunk in particular bundles the shared admin shell (<code>apps/shared/AppHeader.vue</code>, <code>apps/shared/theme.ts</code>, <code>apps/shared/i18n.ts</code>, the Axios HTTP client in <code>apps/shared/api.ts</code>) together with the Vue runtime and Ant Design Vue components, because every admin page imports them.</li>
<li><code>dist/assets/<name>.<hash>.css</code> — compiled CSS extracted from the corresponding Vue Single-File Components under <code>apps/</code>. Source-maps are emitted for these too (<code>*.css.map</code>).</li>
</ul>
<p>The full version history of the plugin is also browsable on its WordPress.org page at https://wordpress.org/plugins/nimblymail-smtp/.</p>
<h3>External services</h3>
<p>NimblyMail does not contact any third-party service on its own. Outbound network requests only happen when <strong>you actively configure and select a mailer</strong> that uses an external provider, and only at the time of sending an email (or, for OAuth providers, when authorizing the connection).</p>
<p>The plugin connects to the following services depending on which mailer you choose. None of these are contacted unless you select that mailer and enter credentials.</p>
<ul>
<li>
<p><strong>NimblyMail OAuth Proxy</strong> (<code>https://oauth.nimblymail.com</code>) — Used <strong>only when you choose Gmail or Outlook / Microsoft 365 as your mailer</strong>. The proxy is operated by the plugin author (NimblyMail Team) and exists so you don’t have to register your own Google Cloud project or Azure application. Endpoints contacted: <code>https://oauth.nimblymail.com/authorize/{google|microsoft}</code>, <code>https://oauth.nimblymail.com/token/{google|microsoft}</code>, <code>https://oauth.nimblymail.com/refresh/{google|microsoft}</code>, <code>https://oauth.nimblymail.com/revoke/{google|microsoft}</code>. <strong>Data sent</strong>: your site URL (<code>get_home_url()</code>), an OAuth state value and PKCE challenge generated by the plugin, the authorization code returned by Google/Microsoft after consent, the refresh token (signed with a per-install HMAC secret) on every token refresh. <strong>No email content, recipient lists, or message metadata is ever sent to the proxy</strong> — actual mail delivery goes directly from your site to Gmail’s / Microsoft’s SMTP servers. NimblyMail Terms of Service: https://nimblymail.com/terms-of-service/ — NimblyMail Privacy Policy: https://nimblymail.com/privacy-policy/</p>
</li>
<li>
<p><strong>Other SMTP</strong> — When configured, every email is sent over SMTP to the server you specify (host, port, encryption, credentials). The data sent is the email itself: From / To / CC / BCC / Subject / Body / attachments. The remote SMTP server is operated by you or your provider; NimblyMail does not select it.</p>
</li>
<li>
<p><strong>Gmail / Google Workspace</strong> — Uses Google’s OAuth 2.0 service (via the NimblyMail OAuth Proxy described above) to authorize sending, and <code>smtp.gmail.com:587</code> (XOAUTH2) to deliver mail. Direct endpoints contacted: <code>https://accounts.google.com/o/oauth2/v2/auth</code> (consent screen), <code>https://www.googleapis.com/oauth2/v2/userinfo</code> (read the authorized email address for the SASL <code>user=</code> field), <code>smtp.gmail.com</code> (SMTP delivery). Data sent directly to Google: the email envelope and message content at send time. Google Terms of Service: https://policies.google.com/terms — Google Privacy Policy: https://policies.google.com/privacy</p>
</li>
<li>
<p><strong>Outlook / Microsoft 365</strong> — Uses Microsoft’s OAuth 2.0 service (via the NimblyMail OAuth Proxy described above) to authorize sending, and <code>smtp.office365.com:587</code> (XOAUTH2) to deliver mail. Direct endpoints contacted: <code>https://login.microsoftonline.com/common/oauth2/v2.0/authorize</code> (consent screen), <code>https://graph.microsoft.com/v1.0/me</code> (read the authorized email address), <code>smtp.office365.com</code> (SMTP delivery). Data sent directly to Microsoft: the email envelope and message content at send time. Microsoft Services Agreement: https://www.microsoft.com/en/servicesagreement/ — Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement</p>
</li>
<li>
<p><strong>Amazon SES</strong> — When configured, emails are sent over SMTP to the AWS SES endpoint you select (e.g. <code>email-smtp.us-east-1.amazonaws.com</code>). Data sent: email envelope and content, plus AWS access key ID and secret. AWS Service Terms: https://aws.amazon.com/service-terms/ — AWS Privacy Notice: https://aws.amazon.com/privacy/</p>
</li>
<li>
<p><strong>Resend</strong> — When configured, emails are sent via HTTPS POST to <code>https://api.resend.com/emails</code>. Data sent: API key, email envelope and content. Resend Terms of Service: https://resend.com/legal/terms-of-service — Resend Privacy Policy: https://resend.com/legal/privacy-policy</p>
</li>
<li>
<p><strong>SendLayer</strong> — When configured, emails are sent via HTTPS POST to <code>https://console.sendlayer.com/api/v1/email</code>. Data sent: API key, email envelope and content. SendLayer Terms: https://sendlayer.com/terms-of-service/ — SendLayer Privacy Policy: https://sendlayer.com/privacy-policy/</p>
</li>
<li>
<p><strong>Brevo</strong> — When configured, emails are sent via HTTPS POST to <code>https://api.brevo.com/v3/smtp/email</code>. Data sent: API key, email envelope and content. Brevo Terms of Service: https://www.brevo.com/legal/termsofuse/ — Brevo Privacy Policy: https://www.brevo.com/legal/privacypolicy/</p>
</li>
<li>
<p><strong>ZeptoMail</strong> — When configured, emails are sent via HTTPS POST to the regional endpoint you select (e.g. <code>https://api.zeptomail.com/v1.1/email</code>, with <code>eu</code>, <code>in</code>, <code>com.cn</code>, or <code>com.au</code> available). Data sent: Send Mail Token, email envelope and content. Zoho Terms of Service: https://www.zoho.com/zeptomail/terms.html — Zoho Privacy Policy: https://www.zoho.com/privacy.html</p>
</li>
<li>
<p><strong>Default (PHP)</strong> — No external service. Emails are handed to the PHP <code>mail()</code> function and routed by your server.</p>
</li>
</ul>
<p>In addition, NimblyMail logs each outgoing email <strong>locally</strong> to a database table on your own WordPress site. No log data is ever transmitted off-site.</p>
<p>The Deliverability Health Audit performs DNS-only lookups for the configured sender domain. When the host’s PHP <code>dns_get_record()</code> is unavailable or restricted, NimblyMail falls back to public DNS-over-HTTPS resolvers (<code>https://cloudflare-dns.com/dns-query</code> and <code>https://dns.google/resolve</code>) to retrieve SPF, DKIM, DMARC, and PTR records. Only the sender domain (and DKIM selector when applicable) is sent in the query — no mail content. Cloudflare DoH Privacy: https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/ — Google Public DNS Privacy: https://developers.google.com/speed/public-dns/privacy</p>


Alternatives to NimblyMail SMTP

Top alternatives