AuthenticSender

Description

AuthenticSender replaces WordPress’ default mail() function with a fully configurable SMTP connection, giving you complete control over how your site delivers email.

SMTP Configuration

Enable or disable SMTP routing with a single checkbox. When disabled, WordPress falls back to its default mail() function. Configure your server connection with:

  • Host – your SMTP server hostname or IP address
  • Port – any valid port (1-65535), defaulting to 25
  • Encryption – None, TLS, or SSL
  • Authentication – optional username and password (stored encrypted with AES-256-GCM)

Provider Presets

Select a preset from the dropdown and the host, port, and encryption fields are filled in automatically. Supported providers:

  • Gmail
  • SendGrid
  • Mailgun
  • Postmark
  • Hostinger

Sender Identity

Override the From name and From email address on outgoing emails when SMTP is enabled. Enable Force Identity to apply From, Reply-To, and BCC even when using WordPress default mail.

Additional Headers

Set global Reply-To (email and name) and BCC addresses. These apply when SMTP is enabled, or when Force Identity is on. The BCC field accepts multiple comma-separated addresses.

Password resets, email confirmations, and similar sensitive messages are never copied to BCC, so reset links and verification tokens are not shared with the BCC address.

Test Email

Send a test message directly from the settings page. AuthenticSender attempts delivery via wp_mail() and returns a clear success or error message, so a misconfiguration never leaves you guessing.

Email Log

Keep a database record of every email sent or failed. The log view includes:

  • Timestamp, recipient, subject, status, and delivery method (SMTP or WP Default)
  • Error message for failed deliveries
  • Filter by All / Success / Failed
  • Paginated table (20 entries per page)
  • One-click Clear Log with confirmation prompt
  • Configurable retention period (1-365 days); older entries are pruned automatically

Logging can be toggled on or off at any time from the Settings tab.

Security

  • SMTP password stored encrypted using AES-256-GCM with WordPress AUTH_KEY and SECURE_AUTH_KEY
  • Global BCC skips password resets, email confirmations, and similar sensitive mail by default
  • Plugin settings (including credentials) are not autoloaded on front-end requests

Installation

  1. Upload the authenticsender folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Go to Settings > AuthenticSender and configure your SMTP connection.
  4. Open the Test Email tab and send a test message to verify everything is working.

FAQ

Do I need to disable WordPress’ default mail() function?

No. AuthenticSender hooks into PHPMailer’s initialization and overrides it automatically. When SMTP is enabled the default mail() function is bypassed; when disabled it is restored.

Can I use this with Gmail?

Yes. Select Gmail from the Provider Preset dropdown, then enter your Google account username and an App Password (not your regular Google password). App Passwords are generated at https://myaccount.google.com/apppasswords

Where are the email logs stored?

Logs are stored in the WordPress database. No files are written to the filesystem. You can view, filter, and clear the log from the Email Log tab in the plugin settings.

Does the plugin log all emails sent by WordPress?

Yes, when logging is enabled. This includes password reset emails, WooCommerce order notifications, contact form submissions, and any other email routed through wp_mail().

What happens if I disable logging after entries already exist?

Existing entries are preserved. No new entries are written while logging is off. You can re-enable logging at any time or clear the existing log manually.

Is my SMTP password stored securely?

Yes. Passwords are encrypted with AES-256-GCM using a key derived from your WordPress AUTH_KEY and SECURE_AUTH_KEY constants before being written to the database.

When do From, Reply-To, and BCC apply?

By default they apply only when SMTP is enabled. Turn on Force Identity in Sender Identity if you want those overrides while using WordPress default mail.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“AuthenticSender” is open source software. The following people have contributed to this plugin.

Contributors

Translate “AuthenticSender” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.0

  • Initial release.