Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

How to Configure Gmail SMTP for WordPress Emails

A complete guide to configuring Gmail or Google Workspace SMTP in WordPress, including OAuth setup, exact server values, app-password fallback, testing, limits, and delivery troubleshooting.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configure WordPress to send through Gmail or Google Workspace with a maintained SMTP plugin, preferably using Google OAuth 2.0. In the plugin, select the Gmail mailer, create a Google Cloud web-application OAuth client, enter the plugin’s exact redirect URI, authorize the sending account, and send a test message before relying on it for site notifications.

Gmail SMTP settings for WordPress

These are the connection values most WordPress SMTP plugins expect when sending through Gmail or Google Workspace.

As an Amazon Associate I earn from qualifying purchases.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Setting Recommended value When to use it
SMTP host smtp.gmail.com All Gmail and Google Workspace SMTP connections
Port 587 TLS/STARTTLS; the clearest default for a WordPress plugin
Alternative port 465 SSL encryption
Authentication Google OAuth 2.0 Preferred when the plugin offers “Sign in with Google” or a Gmail/Google Workspace mailer
Username Your complete Gmail or Google Workspace address The account that authorizes the connection
Password Not used for OAuth Use a generated app password only when OAuth is unavailable
From address The authenticated address or an authorized alias Keeping the sender aligned with the authorized account reduces authentication and delivery problems

Google’s Workspace administration guidance also lists port 25, but for a WordPress plugin the practical choices are port 587 with TLS or port 465 with SSL. Gmail’s SMTP service supports OAuth 2.0, using the XOAUTH2 mechanism to present an OAuth access token instead of a normal account password.

What this setup changes

WordPress normally hands mail to the web server’s local mail function. Hosting providers may throttle that function, misconfigure its DNS, or give messages an unauthenticated sender identity. An SMTP plugin routes the message through Google’s authenticated SMTP service instead. The plugin also gives you a controlled place to choose the sender, authorize Google, and send a diagnostic message.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

This does not turn Gmail into a high-volume delivery platform. Google Workspace guidance documents a limit of 2,000 messages per day for the Gmail SMTP server option. A site with sustained transactional or marketing volume should evaluate a dedicated transactional mail service rather than trying to push all mail through a personal or Workspace inbox.

Before you begin

  • Have administrator access to the WordPress site so you can install and configure a maintained SMTP plugin.
  • Know the Gmail or Google Workspace account that should send the messages.
  • For OAuth, be able to create or select a Google Cloud project and configure its consent screen and OAuth client.
  • For an app-password fallback, turn on 2-Step Verification for the Google account first.
  • Decide which From name and address your site should display. Use the authenticated address or a Google-authorized alias.
  • Keep access to the WordPress plugin’s test-email function. A successful test and the received message’s headers are more useful than assuming that a saved setting works.

Configure Gmail SMTP with OAuth 2.0

OAuth is the preferred route because Google authorizes the plugin with tokens rather than giving the plugin a reusable account password. The exact labels vary by plugin, but the sequence below follows the Gmail/Google Workspace mailer flow documented for widely used WordPress SMTP plugins.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

1. Install a maintained SMTP plugin

  1. In WordPress, open the plugin installer, find a maintained SMTP plugin that explicitly supports Gmail or Google Workspace OAuth, and install it.
  2. Activate the plugin and open its mailer or SMTP settings page.
  3. Select the Gmail or Google Workspace mailer. Do not begin by typing a normal Gmail password into a generic “Other SMTP” form if the plugin provides a Google mailer.

The Google-specific mailer is important because it can perform the OAuth exchange and request the permissions required by Gmail’s API or SMTP authorization flow.

2. Copy the plugin’s authorized redirect URI

  1. Stay on the plugin’s Gmail/Google Workspace settings screen.
  2. Copy the complete authorized redirect URI shown by the plugin. Treat it as an exact string: preserve the scheme, capitalization, path, punctuation, and trailing characters.
  3. Keep that value available while you configure Google Cloud. The URI entered in Google Cloud must match the plugin value character-for-character.

3. Create or select a Google Cloud project

  1. In Google Cloud, create a project for the WordPress mail connection or select an existing project you control.
  2. Open the project’s OAuth consent-screen configuration.
  3. Provide the application information requested by Google and choose the publishing status required for your account and plugin workflow. A consent screen that is incomplete or restricted can produce an access-blocked or authorization error.
  4. If the plugin’s documentation requires the Gmail API, enable the Gmail API in this project before creating or authorizing the client.

Google Workspace administrators can restrict third-party OAuth applications. If a personal Gmail account works but a managed Workspace account cannot authorize, the organization’s policy may be blocking the client rather than the WordPress configuration being wrong.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

4. Create a web-application OAuth client

  1. In the same Google Cloud project, create an OAuth client with the web-application type.
  2. When Google asks for an authorized redirect URI, paste the value copied from the plugin without editing it.
  3. Save the client and copy the generated client ID and client secret. Keep the secret private; it belongs in the WordPress plugin, not in a public post, theme file, or browser-side script.

5. Enter the client details in WordPress

  1. Return to the plugin’s Gmail/Google Workspace mailer settings.
  2. Paste the Google Cloud client ID into the client-ID field and the client secret into the client-secret field.
  3. Save the settings if the plugin requires a separate save before authorization.
  4. Use the plugin’s authorization button, such as “Sign in with Google” or “Allow plugin to send emails,” and sign in to the exact account that should send WordPress mail.
  5. Review the requested permission and grant it. The plugin should return to WordPress with an authorized connection or token status.

Authorize the sending account, not merely the Google account of the person who administers the site. If those are different, the From address and account that Google sees may not match your intended sender.

6. Set the sender identity

  1. Enter the From email address in the plugin’s sender field.
  2. Enter the From name that recipients should see.
  3. Keep the address equal to the OAuth-authorized Gmail or Workspace account unless that account has an authorized alias configured in Google.
  4. If the plugin offers “Force From Email” or “Force From Name,” enable it only when you want every WordPress message to use these values consistently.

Changing only the visible From address does not grant Google permission to send as an unrelated mailbox. An unauthorized mismatch can cause authentication failures, rewriting, or spam placement.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Use an app password only when OAuth is not possible

An app password is a generated credential for an application that cannot complete Google’s OAuth flow. It is not your normal Google account password. Google describes app passwords as 16-digit passcodes for less-secure apps or devices and states that they can be used only on accounts with 2-Step Verification enabled.

Prepare the account

  1. Turn on 2-Step Verification for the Gmail or Google Workspace account.
  2. Open the account’s app-password management page and create a dedicated app password for this WordPress SMTP connection.
  3. Copy the generated value when Google displays it. Store it as a secret and do not paste it into documentation or expose it in a screenshot.

Enter the fallback credentials

  1. In the WordPress plugin, choose a generic SMTP or password-based Gmail option only if the selected client cannot use OAuth.
  2. Set the host to smtp.gmail.com.
  3. Choose port 587 with TLS/STARTTLS, or port 465 with SSL.
  4. Use the full Gmail or Workspace address as the username.
  5. Enter the generated app password as the password. Never enter the account’s ordinary Google password.
  6. Save the settings and send a test message.

App passwords can be revoked. Google also revokes them after the account password changes, so a previously working WordPress connection will need a new app password or a reconfigured credential after that event. A managed Workspace administrator may additionally prohibit app-password use or third-party SMTP access.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

OAuth and app passwords compared

Decision point OAuth 2.0 App password
Security model Google authorizes a token through a consent flow; the normal account password is not stored in WordPress. A generated 16-digit credential is stored by the SMTP client and used instead of the account password.
Setup effort Requires a Google Cloud project, consent-screen configuration, a web OAuth client, an exact redirect URI, and account authorization. Requires 2-Step Verification and creation of a dedicated app password.
Best use Modern plugins that provide a Gmail/Google Workspace mailer or “Sign in with Google.” Legacy or generic SMTP clients that cannot complete OAuth.
Recovery Repair the client, redirect URI, consent configuration, or authorization and reconnect the account. Create a replacement after revocation or after a Google account-password change, then update WordPress.
Organization compatibility Subject to Workspace administrator controls over third-party OAuth applications. Subject to Workspace controls over app passwords, 2-Step Verification, and SMTP access.
Credential exposure WordPress stores client credentials and authorization data, not the ordinary Google password. WordPress stores a reusable generated password until you revoke or replace it.

Choose OAuth whenever the plugin supports it. Choose an app password only to accommodate a client that genuinely lacks a workable Google OAuth implementation.

Send and inspect a test email

  1. Save the plugin settings after authorization or credential entry.
  2. Open the plugin’s test-email tool and send a message to an address you can check immediately.
  3. Confirm that the message arrives, not just that WordPress reports “sent.”
  4. Check the Inbox and spam folder.
  5. Inspect the received headers for the authenticated sender, the visible From address, and the authentication results reported by the recipient system.
  6. Repeat the test with the actual notification type your site uses, such as a contact-form message or password-reset email, if the plugin allows it.

A successful SMTP handshake proves that Google accepted the connection; it does not guarantee inbox placement. Spam filtering, sender-domain alignment, message content, and sending volume still affect delivery.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshoot common failures

“Could not authenticate”

  • For OAuth, verify that the account authorized in the browser is the account intended to send mail.
  • Confirm that the client ID and client secret belong to the same Google Cloud project and OAuth client.
  • Compare the redirect URI in Google Cloud with the plugin’s value character-for-character.
  • Review the consent-screen publishing status and requested permissions, then revoke and repeat authorization if the plugin has a stale or incomplete token.
  • For an app password, confirm that 2-Step Verification is enabled and that you entered the generated app password rather than the normal account password.
  • If the Google account password changed, generate a replacement app password and update WordPress.

Redirect or access-blocked error

  • Copy the redirect URI again from the plugin instead of typing it manually.
  • Check every character in the Google Cloud OAuth client entry, including the protocol, path, capitalization, and ending punctuation.
  • Confirm that the OAuth client is a web application and belongs to the selected project.
  • Check whether a Google Workspace administrator blocks the application or requires administrator approval.
  • Authorize again after correcting the client configuration.

The test succeeds, but mail goes to spam

  • Inspect SPF, DKIM, and DMARC alignment for the domain used in the From address.
  • Make the visible From address consistent with the authenticated Gmail/Workspace account or an authorized alias.
  • Review the recipient’s headers and spam explanation rather than treating SMTP success as proof of inbox delivery.
  • Avoid using Gmail SMTP as a bulk-mail service. Google’s filtering systems may reject or filter suspicious messages.

Messages stop after a period of normal operation

  • Check whether the account password changed, which revokes app passwords.
  • For OAuth, verify that the token has not been revoked and reconnect through the plugin.
  • Review the site’s daily volume against Google Workspace’s documented 2,000-message-per-day limit for the Gmail SMTP server option.
  • Look for a Workspace policy change affecting third-party OAuth, SMTP, or app-password use.

WordPress reports success but recipients receive nothing

  • Send a test to a second mailbox to distinguish a recipient-side filtering issue from a site-wide problem.
  • Check spam and quarantine folders.
  • Inspect message headers when a message is delivered; they can reveal sender rewriting or authentication misalignment.
  • Confirm that the site is not silently using another mailer after a plugin conflict or configuration change.

Volume, policy, and security limits

Daily sending capacity

The 2,000-message-per-day figure documented for the Gmail SMTP server option is a Google Workspace guidance limit, not a promise that every account can safely send that volume. Password resets, order notices, form alerts, and other transactional messages should be monitored so an unexpected loop does not consume the account’s allowance.

Workspace administration

A managed Google Workspace account is governed by organization policy. Administrators can restrict third-party OAuth applications or SMTP use. A configuration that works with a personal Gmail account may therefore fail for a company account until an administrator permits the application or changes the relevant policy.

Credential handling

  • Keep OAuth client secrets and app passwords out of themes, public repositories, screenshots, and support tickets.
  • Use a separate app password for each application when fallback authentication is necessary.
  • Revoke unused app passwords and OAuth authorizations.
  • Limit WordPress administrator access because anyone who can change the mailer settings may be able to redirect site mail.

A practical configuration checklist

  1. Install and activate a maintained plugin with Gmail or Google Workspace support.
  2. Select the Google mailer rather than entering a normal Gmail password into a generic form.
  3. Copy the plugin’s exact authorized redirect URI.
  4. Create or select a Google Cloud project.
  5. Configure the OAuth consent screen and publishing status.
  6. Enable the Gmail API if the plugin requires it.
  7. Create a web-application OAuth client and paste the redirect URI exactly.
  8. Copy the client ID and secret into WordPress.
  9. Authorize the intended sending account.
  10. Set the From address to that account or an authorized alias.
  11. Use smtp.gmail.com with port 587/TLS or 465/SSL when the plugin asks for SMTP values.
  12. Send a test email, inspect headers and spam placement, and monitor volume.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.