LRob Email Toolkit is a all-in-one email plugin for WordPress, free, open source, and 100% self-hosted. It single-handedly replaces the usual stack: SMTP plugin + email logger + contact form plugin + captcha plugin + newsletter plugin + Mailchimp/Brevo subscription.
One single extension, one single design, one single shared SMTP configuration — and no SaaS, no per-subscriber fees, no data sent to third parties. Whether you manage a WooCommerce store, an association website, a professional showcase site, or a local media outlet, your emails are sent from your server and your contacts remain in your database.
Status: Public Beta — v0.8.2. Five modules are available (SMTP, Logs, Contact Form, Captcha, Newsletter). The plugin already sends website emails in production every day. Before version 1.0, the schema may still evolve between minor versions.
Why choose this WordPress email plugin?
Most WordPress sites stack four or five plugins to handle their emails: one for SMTP, one for logs, one for the contact form, one for captcha, one for the newsletter — often with a monthly subscription to boot. LRob Email Toolkit takes the opposite approach:
- Modular Each module activates independently. What you do not activate executes no code.
- Free for real : GPL-2.0, no «lite» version, no locked features, no subscriber billing.
- Light : no Composer, no React, no build, no external CDN. PHP 8.2+ and native JavaScript. The complete zip is about 780 KB.
- Self-hosted your logs, your subscribers, your forms, and your statistics stay in your WordPress database.
- Consistent a shared event vocabulary, a common SMTP routing, a unique graphic identity for all emails generated by the plugin.
- In French : interface translated 100% % into
French (France), developed by a French web host.
Plugin features
SMTP Module — reliable email sending, configured in a few clicks
The SMTP module passes wp_mail() by one or more real SMTP servers, instead of mail() PHP is often blocked or classified as spam.
- Guided setup the host selector offers the real servers of your domain (common presets + live MX resolution), displays a green/red indicator per server and offers a one-click connection test — before you count on it.
- Multiple shipping identities one address per use. WooCommerce for one, the contact form for another, the newsletter for a third.
- Source-based routing rules each type of email comes from the right inbox.
- Security passwords encrypted in database (AES-256-GCM), or entirely offloaded to
wp-config.phpfor the ops teams. - Native replica on
mail()PHP if needed, and local attachment backup by identity.
Module Logs — view all emails your site sends
No more «did the order confirmation go out?» Every outgoing email is recorded: recipients, subject, body, attachments, status, and potential error.
- Search, filters, and detailed view in a modal, without leaving the page.
- One-click email forwarding, attachments included — the files stay on your server, not stuck in an inbox.
- Optional copy in the folder Sent IMAP of the company in question.
- Configurable retention period and activity charts on the dashboard.
Contact Form Module — a visual editor and a real inbox
A manufacturer of WordPress contact forms drag-and-drop, with columns, inline settings, auto-save, and undo/redo.
- Stacked anti-spam : honeypot, time trap, rate limiting, and captcha.
- Ready-to-use form templates, recipients per form, Reply-To selection, subject line and confirmation message templates.
- Unified inbox unread badges, filters, trash with automatic cleanup and line Used on indicating the pages that contain each form.
- Conversations reply to a message from the admin using the WordPress editor. The visitor receives your reply by email, styled to match the form, with a link back to the original page where the form becomes a discussion thread without account creation.
- Form theme without writing a single line of CSS colors, borders, spacing, fonts, hover and focus effects, with live preview. Save a named preset, set one as default, and changing your brand color becomes a single modification. All built-in color sets respect contrast WCAG AA.
- Confirmation animations your choice (flying letter, rocket, confetti, fireworks), all respectful of
prefers-reduced-motion.
Captcha Module — multiple providers, multiple contexts
A captcha service shared by contact forms, newsletter sign-ups, WordPress comments, the login, the lost password, the registration, and the WooCommerce login.
- Integrated Challenges mathematics and image recognition zero third-party calls, zero cookies.
- hCaptcha, Cloudflare Turnstile and Google reCAPTCHA (v2 and v3 by score, including invisible).
- Multiple suppliers and multiple key sets in parallel, assignable by context, with a clear site-wide defect.
- Encrypted identifiers, adjustable theme / size / stealth mode per identity.
Newsletter Module — your emailing, without SaaS or per-subscriber fees
Compose yourself newsletters in Gutenberg and send them to your WordPress subscribers and users, from your own server.
- Lists of two types subscriber lists (manual addition) and WP user lists (by rule: role, WooCommerce customer status, active WooCommerce subscriptions, or custom rule). Lists publics for self-registration, private for your segmentation.
- Audience selector with list counters, unsubscribe visibility, and line-by-line arbitration.
- Registration forms with drag-and-drop (text, email, phone with country selector, title, dropdown list, list choice, captcha) and ready-to-use profiles: Email only, Contact, Full profile.
- Custom fields your own subscriber fields (association, company, member number...) available in columns, form fields, CSV columns, and in
{{tokens}}. - Shared files Attach documents, and recipients receive download buttons. Files are hosted on your site (never sent as attachments), clicks are counted, and expiration is configurable.
- Follow-up opens and clicks via HMAC-signed REST endpoints, engagement statistics per subscriber, cold subscriber detection, one-click unsubscribe (headers RFC 8058).
- Subscriber area modification of name, telephone number, address, and title; changing the email address requires confirmation at the new address.
Deliverability — send a lot, and arrive
- Sending rate by recipient domain, with built-in caps for known rate-limiting providers (Orange, Free, La Poste, Gmail, Outlook, etc.), plus your own rules.
- Global sending limit and by SMTP identity, parallel senders, SMTP circuit breaker.
- Bounce management via dedicated IMAP mailbox or webhook: hard → marked as error, temporary → counted, complaint → unsubscribed.
- Suppression list and rebound journal.
- Page Deliverability bounce and complaint rates, status SPF / DKIM / DMARC, the most problematic domains.
- Health diagnosis WP-Cron.
GDPR and permissions
- Measurement of opens and clicks subject to consent (CNIL 2026 doctrine), with the pixel limited to deliverability for others and the deletion of measurements in the event of withdrawal.
- Consent log and opt-in subscriber explorer.
- Data export and deletion of an individual, including via WordPress's native privacy tools.
- Settings of retention centralized and generated privacy policy text.
- Role-based permissions give access to Newsletters or your inbox to whoever you want.
Global email design
An adjustment Visual identity (logo, accent color, background, font, tagline) defined once on the dashboard styles all emails that the plugin writes itself, with a live preview.
Integrations (scheduled)
Outgoing webhooks to n8n, Slack, Discord, Matrix and generic endpoints. Meanwhile, each module already emits its events: developers can hook into them today via WordPress actions.
Available modules
| Module | Status | Role |
|---|---|---|
| SMTP | ✅ Available | Routing of wp_mail(), multiple identities, source-based rules, secret encryption |
| Email logs | ✅ Available | Complete journal, search, return with attachments, retention |
| Contact form | ✅ Available | Visual editor, stacked anti-spam, inbox, conversations |
| Captcha | ✅ Available | Multi-vendor and multi-context shared service |
| Newsletter | 🧪 Beta | Sending, lists, segmentation, tracking, deliverability, GDPR |
| Integrations | ⏳ Scheduled | n8n Webhooks, Slack, Discord, Matrix |
Who is this WordPress email plugin for?
| Profile | Use cases |
|---|---|
| WooCommerce stores | Reliable transactional emails, verification that a confirmation has been sent, invoice resending |
| Associations | Member newsletter, contact form, role or membership segmentation |
| Professional & self-employed | Polished contact form, admin replies, subscription-free emailing |
| Agencies & webmasters | A single extension to install and maintain across all client sites |
| Media & Content Sites | Self-hosted newsletter, open and click tracking, public lists |
| Tech and ops teams | Secrets in wp-config.php, webhooks, stable hooks, auditable logs |
Technical requirements
- PHP 8.2 or higher
- WordPress 6.8 or higher
- WooCommerce 8.0+ (WooCommerce segmentation for the Newsletter module only — HPOS supported)
- A recent browser for’administration : the design uses
color-mix()(Chrome/Edge 111+, Firefox 113+, Safari 16.2+, all released in 2023). Older browsers gracefully degrade. Public forms do not have any of these requirements.
Plugin installation
- Download file
lrob-email-toolkit-.zipsince the releases page. - In the WordPress administration: Extensions → Add → Upload extension.
- Select zip, install, activate.
- Go to the dashboard Email Toolkit and enable the modules you need — after activation, all modules are disabled by default; you choose explicitly.
Once installed, the plugin updates automatically since git.lrob.net a new version is offered at the next WordPress update check.
Security and performance
A plugin that handles your SMTP credentials and contact list must be flawless:
- Encrypted SMTP credentials and captcha in database in AES-256-GCM, with a key derived from your
AUTH_KEYWordPress via HKDF-SHA256. WithoutAUTH_KEYConfirmed, the plugin refuses to encrypt secrets. - Signed tracking tokens With HMAC-SHA256: any tampering invalidates the token, and the endpoint refuses to save or redirect.
- Anonymized IP addresses before storage (IPv4 → /24, IPv6 → /48). User agents are not kept by default.
- All overloadable identifier fields by constants
wp-config.php, to completely get the secrets out of the base. - No external runtime dependencies no Composer, no React, no build, no CDN. Every disabled module adds zero code to the runtime.
For developers
Stable hooks since v0.0.1, regardless of which modules are enabled:
// Subscribe to a specific event
add_action('lrob_etk_email_sent', function (array $payload): void {
// $payload = ['log_id' => ..., 'to' => [...], 'subject' => ..., 'identity_id' => ...]
});
// Or listen for all plugin events at once
add_action('lrob_etk_event', function (string $name, array $payload): void {
error_log("[lrob-etk] {$name}: " . wp_json_encode($payload));
}, 10, 2);
Available events: email.*, contact_form.*, newsletter.*, newsletter.recipient.*, newsletter.subscriber.*, newsletter.tracking.*.
FAQ — All-in-One WordPress Email Plugin
Is this plugin really free?
Yes. GPL-2.0-or-later, no premium version, no subscription, no disguised freemium. All the features described on this page are in the downloadable version.
Can I replace WP Mail SMTP, Contact Form 7, and Mailchimp with this single plugin?
That is exactly the goal. The SMTP, Logs, Contact Form, Captcha, and Newsletter modules cover this stack, with a shared SMTP configuration and a consistent design. Each module activates independently: you can very well use only SMTP and logs.
How much does it cost to send the newsletter?
Nothing more than your hosting. The emails are sent from your via server your SMTP identities: no billing per subscriber, and your contact list never leaves your site.
Will my emails go through?
That is the entire purpose of the deliverability feature: sending rate per recipient domain with caps for throttling providers, limit per SMTP identity, bounce management via IMAP or webhook, suppression list, and a page displaying your bounce and complaint rates as well as the status of your SPF, DKIM, and DMARC records.
Is the plugin GDPR compliant?
It provides the tools to do so: measurement of opens and clicks subject to consent (CNIL 2026 doctrine), consent log, export and erasure of a person's data, retention settings, generated privacy policy text and integration with WordPress's native privacy tools.
Is it WooCommerce compatible?
Yes. WooCommerce emails go through the SMTP module and appear in the logs (with resend capability). The Newsletter module can segment by customer status and active WooCommerce subscriptions (HPOS supported).
Can we use a captcha without a third-party service?
Yes: the challenges mathematics and image recognition integrated make no external calls and set no cookies. hCaptcha, Turnstile and reCAPTCHA remain available if you prefer them.
Is the plugin in French?
Yes, the interface is translated to 100 % in French (French (France)), in addition to the original English.
What does «public beta» mean?
The plugin is running in production and sending real emails daily, but we are pre-1.0: the database schema can still evolve between minor versions. Migrations are idempotent; rollbacks are not supported.
How can I get help?
The code is open. Bugs and feature requests via issues. For professional support or’WordPress outsourcing, contact LRob.
Roadmap
By order of priority, without version commitment:
- Redesign of statistics — dedicated view per newsletter and global tiles on the dashboard (open and click trends, list aggregates, mailing details).
- Universal email tracking — «Open» column in the logs.
- One-off email composer with templates and attachments.
- Marketing automations (sequences, drip campaigns).
- Drag-and-drop email builder, subscriber tags, list rules on custom fields, default WordPress email customization.
Download and source code
LRob Email Toolkit is distributed under license GPL-2.0-or-later (the same as WordPress). The complete source code is open.
Developed by LRob, French WordPress host
This free WordPress email plugin is developed and maintained by LRob, WordPress hosting specialist based in Orléans. If you're looking for a high-performance WordPress hosting, the’outsourcing or a security audit for your site, discover our offers.
