Title: AuthenticSender Author: Alex Hedström Published: August 12, 2026 Last modified: August 13, 2026 --- Search plugins ![](https://ps.w.org/authenticsender/assets/banner-772x250.png?rev=3643664) ![](https://ps.w.org/authenticsender/assets/icon-256x256.png?rev=3643664) # AuthenticSender By [Alex Hedström](https://profiles.wordpress.org/alexhedstrom/) [Download](https://downloads.wordpress.org/plugin/authenticsender.1.0.1.zip) * [Details](https://pcd.wordpress.org/plugins/authenticsender/#description) * [Reviews](https://pcd.wordpress.org/plugins/authenticsender/#reviews) * [Installation](https://pcd.wordpress.org/plugins/authenticsender/#installation) * [Development](https://pcd.wordpress.org/plugins/authenticsender/#developers) [Support](https://wordpress.org/support/plugin/authenticsender/) ## Description AuthenticSender replaces WordPress’ default `mail()` function with a configurable SMTP connection or the UseSend HTTP API, giving you control over how your site delivers email. #### Delivery Method Choose **SMTP** (default) or **UseSend API**. Existing SMTP configurations keep working unchanged when SMTP is selected. #### SMTP Configuration Enable or disable SMTP routing with a single checkbox. When disabled (and not using UseSend API), WordPress falls back to its default `mail()` function. Configure your server connection with: * **Host** – your SMTP server hostname or IP address * **Port** – any valid port (1-65535), defaulting to 25 * **Encryption** – None, TLS, or SSL * **Authentication** – optional username and password (stored encrypted with AES- 256-GCM) #### Provider Presets Select a preset from the dropdown and the host, port, and encryption fields are filled in automatically. Supported providers: * Gmail * SendGrid * Mailgun * Postmark * Hostinger * UseSend (host `smtp.usesend.com`, username `usesend`, password = your API key) For a self-hosted UseSend SMTP proxy, use Custom and enter your proxy host with the same username/API-key password pattern. #### UseSend API Send mail through the UseSend HTTP API instead of SMTP: * Encrypted API key storage * Cloud hosting (`app.usesend.com`) or self-hosted instance URL * From, Reply-To, BCC, HTML/text, and attachments are mapped to the API #### Sender Identity Override the From name and From email address on outgoing emails when SMTP is enabled or UseSend API is selected. Enable **Force Identity** to apply From, Reply-To, and BCC even when using WordPress default mail. #### Additional Headers Set global Reply-To (email and name) and BCC addresses. These apply when SMTP is enabled, UseSend API is selected, or when Force Identity is on. The BCC field accepts multiple comma-separated addresses. Password resets, email confirmations, and similar sensitive messages are never copied to BCC, so reset links and verification tokens are not shared with the BCC address. #### Test Email Send a test message directly from the settings page. AuthenticSender attempts delivery via `wp_mail()` and returns a clear success or error message, so a misconfiguration never leaves you guessing. #### Email Log Keep a database record of every email sent or failed. The log view includes: * Timestamp, recipient, subject, status, and delivery method (SMTP, UseSend, or WP Default) * Error message for failed deliveries * Filter by All / Success / Failed * Paginated table (20 entries per page) * One-click Clear Log with confirmation prompt * Configurable retention period (1-365 days); older entries are pruned automatically Logging can be toggled on or off at any time from the Settings tab. #### Security * SMTP password and UseSend API key stored encrypted using AES-256-GCM with WordPress` AUTH_KEY` and `SECURE_AUTH_KEY` * Unique (non-default, non-identical) authentication keys are required before new SMTP passwords or UseSend API keys can be saved; English and localized sample phrases are detected * Self-hosted UseSend URLs must use HTTPS; localhost, private/reserved IPs, and unresolvable hosts are blocked by default; HTTP redirects are disabled * Global BCC skips password resets, email confirmations, and similar sensitive mail by default * Email log redacts subjects for the same sensitive-mail patterns * Plugin settings (including credentials) are not autoloaded on front-end requests ## Installation 1. Upload the `authenticsender` folder to the `/wp-content/plugins/` directory. 2. Activate the plugin through the Plugins menu in WordPress. 3. Go to **Settings > AuthenticSender** and choose SMTP or UseSend API. 4. Open the **Test Email** tab and send a test message to verify everything is working. ## FAQ ### Do I need to disable WordPress’ default mail() function? No. AuthenticSender hooks into PHPMailer (SMTP) or `pre_wp_mail` (UseSend API) automatically. When SMTP is enabled or UseSend API is selected, the default `mail()` function is bypassed; otherwise it is restored. ### Can I use this with Gmail? Yes. Select Gmail from the Provider Preset dropdown, then enter your Google account username and an App Password (not your regular Google password). App Passwords are generated at https://myaccount.google.com/apppasswords ### How do I use UseSend? Two options: 1. **SMTP** — Delivery Method = SMTP, Provider Preset = UseSend, username `usesend`, password = your API key. 2. **API** — Delivery Method = UseSend API, enter your API key, choose Cloud or Self- hosted (and your instance URL). ### Where are the email logs stored? Logs are stored in the WordPress database. No files are written to the filesystem. You can view, filter, and clear the log from the **Email Log** tab in the plugin settings. ### Does the plugin log all emails sent by WordPress? Yes, when logging is enabled. This includes password reset emails, WooCommerce order notifications, contact form submissions, and any other email routed through `wp_mail()`. ### What happens if I disable logging after entries already exist? Existing entries are preserved. No new entries are written while logging is off. You can re-enable logging at any time or clear the existing log manually. ### Is my SMTP password stored securely? Yes. Passwords and UseSend API keys are encrypted with AES-256-GCM using a key derived from your WordPress `AUTH_KEY` and `SECURE_AUTH_KEY` constants before being written to the database. ### When do From, Reply-To, and BCC apply? They apply when SMTP is enabled or UseSend API is selected. Turn on **Force Identity** in Sender Identity if you want those overrides while using WordPress default mail. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “AuthenticSender” is open source software. The following people have contributed to this plugin. Contributors * [ Alex Hedström ](https://profiles.wordpress.org/alexhedstrom/) [Translate “AuthenticSender” into your language.](https://translate.wordpress.org/projects/wp-plugins/authenticsender) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/authenticsender/), check out the [SVN repository](https://plugins.svn.wordpress.org/authenticsender/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/authenticsender/) by [RSS](https://plugins.trac.wordpress.org/log/authenticsender/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Add UseSend SMTP provider preset. * Add UseSend HTTP API delivery (cloud and self-hosted instance URL). * Log delivery method as UseSend when the API path is active. * Warn when WordPress AUTH_KEY / SECURE_AUTH_KEY still use sample defaults. * Require unique AUTH_KEY / SECURE_AUTH_KEY (including localized samples) before saving new credentials. * Require HTTPS for self-hosted UseSend; block localhost/private IPs and unresolvable hosts by default; disable HTTP redirects. * Reject invalid UseSend Instance URLs on save (keep previous value). * Apply test-email rate limit when sending throws an exception. * Redact sensitive email subjects in the email log. #### 1.0.0 * Initial release. ## Meta * Version **1.0.1** * Last updated **5 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.4 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/authenticsender/) * Tags * [email](https://pcd.wordpress.org/plugins/tags/email/)[mail](https://pcd.wordpress.org/plugins/tags/mail/) [phpmailer](https://pcd.wordpress.org/plugins/tags/phpmailer/)[smtp](https://pcd.wordpress.org/plugins/tags/smtp/) * [Advanced View](https://pcd.wordpress.org/plugins/authenticsender/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/authenticsender/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/authenticsender/reviews/) ## Contributors * [ Alex Hedström ](https://profiles.wordpress.org/alexhedstrom/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/authenticsender/)