How to choose
Grade school
Any service on this list can carry your store’s emails. If you’re not sure, pick SendGrid or Brevo — we have step-by-step guides for both.
High school
Pick a service built for transactional email, that you’re happy to own and pay for if you outgrow its free tier. SendGrid and Brevo have full guides here. Check the “Plugin edition” column: a few services only work with a paid WP Mail SMTP licence.
College
Compare volume pricing, how long each keeps message logs, how it authenticates your domain (CNAME delegation versus TXT keys), whether it separates transactional from marketing streams, and whether its mailer is in the free plugin. API mailers are preferable to generic SMTP for security and error reporting.
Postgraduate
Weigh portability and control: provider lock-in shows up in suppression data, templates and reputation history, not just in the transport. Choose least-privilege credentials, and prefer providers whose domain authentication doesn’t consume your apex SPF lookup budget.
Developer
Mailer availability reflects WP Mail SMTP 4.9.0: Amazon SES, Microsoft 365/Outlook and Zoho are hard-disabled in the free plugin; the rest ship free. Auth types differ — API key, OAuth app consent or SMTP credentials — so hosts, ports and records are never interchangeable between providers.
Supported services
Source: WP Mail SMTP mailer guide, checked September 22, 2026. Provider plans and prices are set by each provider. Some providers also need a paid plan for features such as dedicated IPs.
Setting one up
Grade school
Every service has the same basic steps: make an account, prove you own your domain, make a secret key, and type it into your website yourself.
High school
- Create an account with the service using your branded business address.
- Add and verify your sending domain there, then add the DNS records it gives you.
- Create a key (or sign-in connection) with only the permission needed to send mail.
- In WordPress, open WP Mail SMTP, choose the service and paste the key yourself.
- Send the plugin’s test email, then check a real storefront email.
College
The steps are the same everywhere; the details differ. Domain verification can be CNAMEs, TXT records or both. Credentials can be an API key, an OAuth consent or SMTP username and password. Enter the credential directly in WordPress, or have your own administrator do it. If YPB is helping you, grant YPB the narrowest WordPress access needed rather than sending the key.
Postgraduate
Treat credential issuance, domain authentication, runtime installation and delivery verification as separate controls, each with its own evidence. Scope keys to sending only, record who issued them and where they’re used, and plan rotation so that replacing a key doesn’t leave another consumer failing silently.
Developer
Prefer wp-config.php constants over database-stored secrets where your deployment allows (WP Mail SMTP constants; enable with WPMS_ON). Never commit secrets to source control or expose them to the browser. Allow the provider’s exact API host through any outbound HTTP block.
