{"id":394027,"date":"2026-11-01T20:38:31","date_gmt":"2026-11-01T20:38:31","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/tibomail-business-email-inbox\/"},"modified":"2026-11-01T20:37:59","modified_gmt":"2026-11-01T20:37:59","slug":"tibomail","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/tibomail\/","author":23584826,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.4","stable_tag":"1.0.4","tested":"7.1.4","requires":"6.3","requires_php":"7.4","requires_plugins":null,"header_name":"TiboMail \u2013 Business Email Inbox","header_author":"WebTibo","header_description":"Read, write and manage your business email (IMAP\/SMTP) right inside WordPress. A clean, fast inbox with notifications, attachments, folders and search, without leaving your dashboard.","assets_banners_color":"324c85","last_updated":"2026-11-01 20:37:59","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/webtibo.com\/eklentiler\/tibomail\/","header_author_uri":"https:\/\/webtibo.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":63,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.4":{"tag":"1.0.4","author":"webtibo","date":"2026-11-01 20:37:59","revision":3778538}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3778538,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3778538,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3778538,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3778538,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.4"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3778538,"resolution":"1","location":"assets","locale":"","width":1440,"height":900},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3778538,"resolution":"2","location":"assets","locale":"","width":1440,"height":900},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3778538,"resolution":"3","location":"assets","locale":"","width":1440,"height":1000},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3778538,"resolution":"4","location":"assets","locale":"","width":1440,"height":1100},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3778538,"resolution":"5","location":"assets","locale":"","width":1440,"height":3006}},"screenshots":{"1":"Three-pane inbox with folders, filters and the reading pane","2":"Composing a reply with attachments","3":"One-minute setup with cPanel auto-detection","4":"Settings: notifications, forwarding and WordPress email delivery","5":"Works on phones"}},"plugin_section":[262246],"plugin_tags":[267,36366,4040,6696,279161],"plugin_category":[41],"plugin_contributors":[287778],"plugin_business_model":[],"class_list":["post-394027","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-email","plugin_tags-imap","plugin_tags-inbox","plugin_tags-smtp","plugin_tags-webmail","plugin_category-communication","plugin_contributors-webtibo","plugin_committers-webtibo"],"banners":{"banner":"https:\/\/ps.w.org\/tibomail\/assets\/banner-772x250.png?rev=3778538","banner_2x":"https:\/\/ps.w.org\/tibomail\/assets\/banner-1544x500.png?rev=3778538","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/tibomail\/assets\/icon-128x128.png?rev=3778538","icon_2x":"https:\/\/ps.w.org\/tibomail\/assets\/icon-256x256.png?rev=3778538","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/tibomail\/assets\/screenshot-1.png?rev=3778538","caption":"Three-pane inbox with folders, filters and the reading pane"},{"src":"https:\/\/ps.w.org\/tibomail\/assets\/screenshot-2.png?rev=3778538","caption":"Composing a reply with attachments"},{"src":"https:\/\/ps.w.org\/tibomail\/assets\/screenshot-3.png?rev=3778538","caption":"One-minute setup with cPanel auto-detection"},{"src":"https:\/\/ps.w.org\/tibomail\/assets\/screenshot-4.png?rev=3778538","caption":"Settings: notifications, forwarding and WordPress email delivery"},{"src":"https:\/\/ps.w.org\/tibomail\/assets\/screenshot-5.png?rev=3778538","caption":"Works on phones"}],"raw_content":"<!--section=description-->\n<p>Your website and your business email usually live on the same hosting account, but you keep switching between the WordPress dashboard and an old webmail screen. <strong>TiboMail brings your mailbox into WordPress.<\/strong><\/p>\n\n<p>Connect the mailbox you created in cPanel, Plesk, DirectAdmin or any other host (or Gmail, Outlook, Yandex, iCloud) and read, reply, forward and organize your mail in a modern three-pane inbox, without leaving your dashboard.<\/p>\n\n<h4>Setup in under a minute<\/h4>\n\n<p>Type your email address and password. TiboMail finds the server settings for you:<\/p>\n\n<ul>\n<li>It reads the mail client auto-configuration your hosting panel publishes (cPanel \"Connect Devices\" \/ autoconfig).<\/li>\n<li>It tries the standard settings hosting panels use: <code>mail.yourdomain.com<\/code>, IMAP 993 SSL\/TLS, SMTP 465 SSL\/TLS, the full email address as username.<\/li>\n<li>Popular providers (Gmail, Outlook\/Hotmail, Yandex, iCloud, Yahoo) are configured automatically.<\/li>\n<\/ul>\n\n<p>You can always enter the server details by hand.<\/p>\n\n<h4>A nicer inbox<\/h4>\n\n<ul>\n<li>Three-pane layout: folders, message list, reading pane. Works on phones too.<\/li>\n<li>Unread, starred and attachment filters, server-side search.<\/li>\n<li>Reply, reply all and forward (with the original attachments), rich text editor, signature, drag and drop attachments.<\/li>\n<li>Sent messages are saved to your Sent folder, so they also show up in webmail and on your phone.<\/li>\n<li>Star, mark read\/unread, move to folder, mark as spam, delete. Changes sync both ways with the mail server.<\/li>\n<li>Keyboard shortcuts (c, r, f, j\/k, \/, Del).<\/li>\n<\/ul>\n\n<h4>Never miss a message<\/h4>\n\n<ul>\n<li>Desktop notifications and a sound when new mail arrives, on any admin screen.<\/li>\n<li>Unread counter in the admin bar and on the menu.<\/li>\n<li>\"Latest messages\" dashboard widget.<\/li>\n<li><strong>Forward new mail<\/strong> to another address: a short notice with a link, or a full copy.<\/li>\n<\/ul>\n\n<h4>Secure by design<\/h4>\n\n<ul>\n<li>Your password is stored encrypted (libsodium) with a key derived from your site's secret keys, and is only sent to your own mail server.<\/li>\n<li>HTML emails are shown in a sandboxed frame; scripts and forms are removed.<\/li>\n<li>Remote images (tracking pixels) are blocked until you allow them, per message or per sender.<\/li>\n<li>Only administrators can use the mailbox (changeable with the <code>tibomail_capability<\/code> filter).<\/li>\n<li>No third-party service: TiboMail connects straight from your site to the mail server you configure (see \"External services\"). No ext-imap needed; it works on PHP 8.4.<\/li>\n<\/ul>\n\n<h4>Bonus: better delivery for WordPress emails<\/h4>\n\n<p>Optionally send WordPress's own emails (WooCommerce orders, password resets, contact forms) through the same mailbox, so they come from your real mail server and land in the inbox instead of spam.<\/p>\n\n<p><strong>For online shops:<\/strong> when a customer writes \"#1234\" or \"sipari\u015f no 1234\", TiboMail finds the WooCommerce order and shows its status, total, items and cargo tracking above the message. Ready-made replies (order received, shipped, return request, delay, stock) fill in the customer name, order number and tracking link for you.<\/p>\n\n<h4>Privacy<\/h4>\n\n<ul>\n<li>No telemetry, no tracking, no ads in the admin panel and no remote license checks.<\/li>\n<li>Messages stay on your mail server; only a small cache (headers, previews and recently opened bodies) is kept in your database.<\/li>\n<li>Uninstalling removes the cache table and every option the plugin created. Your mail on the server is never touched.<\/li>\n<\/ul>\n\n<h4>Pro add-on<\/h4>\n\n<p>An optional Pro add-on is available separately at https:\/\/webtibo.com\/eklentiler\/tibomail\/. It adds mail rules and filters, a smarter spam filter, auto-replies, a shared team inbox with assignments, and WooCommerce customer context next to each message.<\/p>\n\n<p>No feature of this plugin is locked or time-restricted. Everything described above works fully on its own, with as many mailboxes as you like (info@, sales@, support@ \u2026), without the add-on.<\/p>\n\n<h4>Languages<\/h4>\n\n<p>English, with a complete Turkish (T\u00fcrk\u00e7e) translation included. Translations are welcome on translate.wordpress.org.<\/p>\n\n<h3>Source code<\/h3>\n\n<p>All JavaScript and CSS files in this plugin (assets\/app.js, assets\/notify.js and the stylesheets) are the original, human-readable source code. They are written by hand and are not generated, bundled or minified by any build tool, so there is nothing to compile.<\/p>\n\n<h3>External services<\/h3>\n\n<p>TiboMail only talks to servers you choose yourself, and only after you add a mailbox. There is no telemetry, no CDN and no remote licensing in this plugin.<\/p>\n\n<ul>\n<li><strong>Your IMAP and SMTP mail server<\/strong> (the host you enter or confirm in the setup wizard, e.g. mail.yourdomain.com, imap.gmail.com). The plugin connects to it to list, read, move and delete messages (IMAP) and to send mail you write (SMTP), plus a background sync every five minutes (WP-Cron) and while the dashboard is open. Sent: your mail username and password, and the messages you send. This is the mail provider you already use; its own terms and privacy policy apply (for example Google: https:\/\/policies.google.com\/privacy, Microsoft: https:\/\/privacy.microsoft.com\/privacystatement, Yandex: https:\/\/yandex.com\/legal\/confidential\/).<\/li>\n<li><strong>Mail auto-configuration lookup<\/strong> (only when you click Connect in the setup wizard): the plugin requests <code>https:\/\/autoconfig.&lt;your-domain&gt;\/mail\/config-v1.1.xml<\/code> and <code>https:\/\/&lt;your-domain&gt;\/.well-known\/autoconfig\/mail\/config-v1.1.xml<\/code> on the domain of the email address you typed. Sent: your email address (as the <code>emailaddress<\/code> parameter). These URLs are served by your own hosting panel (e.g. cPanel), so your host's terms and privacy policy apply.<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate the plugin.<\/li>\n<li>Click <strong>Mail<\/strong> in the admin menu.<\/li>\n<li>Enter your email address and password, then <strong>Connect<\/strong>.<\/li>\n<\/ol>\n\n<p>If automatic detection does not work, open <strong>Server settings<\/strong> and enter the details from your hosting panel. In cPanel these are under <em>Email Accounts \u203a Connect Devices<\/em>.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20it%20delete%20or%20move%20my%20mail%3F\"><h3>Does it delete or move my mail?<\/h3><\/dt>\n<dd><p>No. Your mail stays on your mail server. TiboMail only keeps a small local cache (headers and previews) to make the inbox fast. Disconnecting or uninstalling removes only this cache.<\/p><\/dd>\n<dt id=\"which%20mail%20servers%20are%20supported%3F\"><h3>Which mail servers are supported?<\/h3><\/dt>\n<dd><p>Any server that supports IMAP and SMTP: cPanel, Plesk, DirectAdmin, Zimbra, Microsoft 365, Google Workspace, Yandex and others. For Gmail and Outlook with two-step verification, use an app password.<\/p><\/dd>\n<dt id=\"how%20often%20does%20it%20check%20for%20new%20mail%3F\"><h3>How often does it check for new mail?<\/h3><\/dt>\n<dd><p>Every minute while you have the dashboard open, and every five minutes in the background (WP-Cron). The refresh button checks immediately.<\/p><\/dd>\n<dt id=\"my%20server%20uses%20a%20self-signed%20certificate.\"><h3>My server uses a self-signed certificate.<\/h3><\/dt>\n<dd><p>Untick \"Verify the server certificate\" in the server settings.<\/p><\/dd>\n<dt id=\"does%20it%20need%20the%20php%20imap%20extension%3F\"><h3>Does it need the PHP IMAP extension?<\/h3><\/dt>\n<dd><p>No. TiboMail has its own IMAP client, so it works on hosts without ext-imap and on PHP 8.4.<\/p><\/dd>\n<dt id=\"where%20is%20my%20mailbox%20password%20stored%3F\"><h3>Where is my mailbox password stored?<\/h3><\/dt>\n<dd><p>Encrypted in your database (libsodium, or OpenSSL as a fallback) with a key derived from the secret keys in wp-config.php, so a copied database alone does not reveal it. For extra safety you can keep it out of the database completely: add <code>define( 'TIBOMAIL_PASSWORD', 'your-password' );<\/code> to wp-config.php (use <code>TIBOMAIL_PASSWORD_2<\/code>, <code>TIBOMAIL_PASSWORD_3<\/code> \u2026 for further mailboxes). When the constant is set, the password field may be left empty and nothing is stored. You can also add your own secret with <code>define( 'TIBOMAIL_KEY', 'random-text' );<\/code>; set it before connecting a mailbox.<\/p><\/dd>\n<dt id=\"who%20can%20use%20the%20mailbox%3F\"><h3>Who can use the mailbox?<\/h3><\/dt>\n<dd><p>Administrators (the <code>manage_options<\/code> capability). Developers can change it with the <code>tibomail_capability<\/code> filter.<\/p><\/dd>\n<dt id=\"does%20it%20send%20wordpress%20emails%20through%20my%20mailbox%3F\"><h3>Does it send WordPress emails through my mailbox?<\/h3><\/dt>\n<dd><p>Only if you turn on \"Send WordPress emails (orders, password resets, forms) through this mailbox\" in Settings. It is off by default.<\/p><\/dd>\n<dt id=\"what%20happens%20when%20i%20uninstall%20it%3F\"><h3>What happens when I uninstall it?<\/h3><\/dt>\n<dd><p>The local message cache, the settings and the stored account are deleted. Nothing is deleted from your mail server.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Multiple mailboxes are part of the free plugin: add as many mailboxes as you need and switch between them.<\/li>\n<li>The admin menu item moved lower in the menu.<\/li>\n<li>Security: every REST request value is sanitized as soon as it arrives; cached message data is sanitized right after decoding.<\/li>\n<li>Mail headers (In-Reply-To, References) keep their angle brackets, so replies thread correctly.<\/li>\n<li>New: the mailbox password can be kept in wp-config.php (<code>TIBOMAIL_PASSWORD<\/code>) instead of the database.<\/li>\n<li>Plugin list links: Get started, Settings, Documentation, Support and Rate the plugin.<\/li>\n<li>Admin and dashboard styles are loaded through the WordPress style API.<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>WooCommerce order card: order numbers written in a message (#1234, \"sipari\u015f no 1234\") are recognised and the order status, total, items and cargo tracking are shown above the message.<\/li>\n<li>Ready-made shop replies in the composer (order received, shipped, return request, delay, stock) with {musteri}, {siparis_no}, {kargo_takip} and {magaza} filled in automatically.<\/li>\n<\/ul>\n\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Works without the mbstring PHP extension (UTF-8 safe string helpers and IMAP folder name encoding).<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Prefixed all functions, options, hooks, REST routes, database tables and handles with the plugin slug (existing data is migrated automatically); escaped output; removed load_plugin_textdomain; documented external services.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First release.<\/li>\n<\/ul>","raw_excerpt":"Read, write and manage your business email (IMAP\/SMTP) inside WordPress. A clean, fast inbox with new mail notifications and forwarding.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/394027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=394027"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/webtibo"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=394027"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=394027"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=394027"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=394027"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=394027"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=394027"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}