WordPress and WooCommerce

By default, WordPress sends through the hosting server's mail() function. Without authentication for your domain, those emails (password resets, WooCommerce orders, contact forms) land in spam or never arrive. Switching to authenticated SMTP sends them signed with your domain.

Before you start#

1. In Couryo, verify the site's domain (for example, example.com).
2. Create an API key with the send scope. It is the SMTP password.

With an SMTP plugin#

Any generic SMTP plugin works (FluentSMTP, WP Mail SMTP, Post SMTP and others). Field names vary a little between them; the values are these:

1. In Plugins > Add New, install and activate the SMTP plugin you prefer.
2. In the plugin settings, choose Other SMTP (or "generic SMTP").
3. Fill in:

4. Save and use the plugin's test email to send yourself a message.
5. In the Couryo dashboard, under Emails, the message shows up with its timeline and the destination server's answer.

If the plugin accepts the password as a constant in wp-config.php, prefer it: the key stays out of the database.

Without a plugin#

Create the file below (a "must-use plugin", always loaded) and put the key in wp-config.php:

define('COURYO_API_KEY', 'ck_live_...');

<?php
/**
 * Plugin Name: Couryo SMTP
 * Description: Sends WordPress email through Couryo's SMTP.
 */
add_action('phpmailer_init', function ($phpmailer) {
    $phpmailer->isSMTP();
    $phpmailer->Host = 'smtp.couryo.com';
    $phpmailer->Port = 587;
    $phpmailer->SMTPSecure = 'tls'; // STARTTLS; for 465 use 'ssl'
    $phpmailer->SMTPAuth = true;
    $phpmailer->Username = 'couryo';
    $phpmailer->Password = COURYO_API_KEY;
});

add_filter('wp_mail_from', fn () => 'no-reply@example.com');
add_filter('wp_mail_from_name', fn () => 'Example');

Test it from the login screen with Lost your password?: the reset email should show up in the Couryo dashboard within seconds.

WooCommerce#

WooCommerce emails use the same wp_mail, so they already go through Couryo. In WooCommerce > Settings > Emails, check:

• the sender name and address on the verified domain (the same as the plugin);
• which order emails are on, so you do not send notices nobody reads.

Send invoices and payment slips as links, not attachments: attachments like these are common in scams and filters distrust them.

Common problems#