1
00:00:00,700 --> 00:00:06,130
In this video we'll be exploring lots of options for setting up secure and reliable email systems that

2
00:00:06,130 --> 00:00:07,500
WordPress can use.

3
00:00:07,690 --> 00:00:14,230
You'll be setting up several free but robust ways of using best practices for transactional email from

4
00:00:14,230 --> 00:00:18,230
the easy G-mail to the free levels at center grid and spark posts.

5
00:00:18,370 --> 00:00:23,270
You'll be able to take control of outgoing email and separate it from your web hosting account.

6
00:00:23,470 --> 00:00:28,810
By the end of this video you'll have the powerful email sending capabilities needed for e-commerce sites

7
00:00:28,980 --> 00:00:35,050
membership's systems and even internal marketing email making WordPress into the interactive content

8
00:00:35,050 --> 00:00:37,570
management system it can be.

9
00:00:37,630 --> 00:00:43,660
Let's start by making sure you have a live server set up hopefully with a domain name pointed to it

10
00:00:43,870 --> 00:00:48,030
and resolving back to that domain similar to what I have at.

11
00:00:48,070 --> 00:00:50,040
Greg Davis duck.

12
00:00:50,710 --> 00:00:57,460
If you open the students W.P. of course dot com Web site itself you'll remember that we have a resources

13
00:00:57,460 --> 00:01:01,270
link here or down on the resources button here.

14
00:01:01,270 --> 00:01:07,030
There's also a link right at the bottom of the page that if you open the resource page under hosting

15
00:01:07,060 --> 00:01:10,670
we've got a few different hosting programs available.

16
00:01:10,840 --> 00:01:17,240
And firstly I'd recommend checking out site ground because the least expensive plan of shared hosting

17
00:01:17,240 --> 00:01:19,840
at site Ground is called Startup.

18
00:01:19,840 --> 00:01:27,230
If you click the link will open up in a new window and you can go ahead and look at the startup price.

19
00:01:27,310 --> 00:01:29,930
Now the regular price is nine ninety five a month.

20
00:01:30,020 --> 00:01:38,100
But however many months you commit to it's only 395 a month and it even comes with a free domain name

21
00:01:38,890 --> 00:01:45,130
and so in order to get started you just sign up by clicking this orange button and then you can buy

22
00:01:45,130 --> 00:01:52,200
a domain name and for domains I would recommend GoDaddy dot com and you can see I'm logged in and I'm

23
00:01:52,210 --> 00:01:57,330
managing my domains and here's my Greg Davis dot com domain right here.

24
00:01:57,400 --> 00:02:05,590
The way that I point my most of my domains to site Ground is by using name servers and you put in this

25
00:02:05,830 --> 00:02:12,490
information here two different name servers that my site Ground account has given to me back inside

26
00:02:12,490 --> 00:02:15,240
of the resources page at WP dev courses.

27
00:02:15,250 --> 00:02:16,250
Dot com.

28
00:02:16,420 --> 00:02:26,110
The ICO web hosting link points to rob Percival's own eco web hosting Dakoda UK and your course comes

29
00:02:26,110 --> 00:02:33,940
with a free segment a free trial of his hosting program and so if you get a domain and set up a hosting

30
00:02:33,940 --> 00:02:40,210
program as I have taught in a previous video you can have a live host available for a trial period at

31
00:02:40,240 --> 00:02:49,190
Eco web hosting back at students that W.P. of course dot com flywheel is one of my favorite web hosts

32
00:02:49,430 --> 00:02:57,700
and if you sign up using this link the flywheel 60 day free demo site is free instead of a 14 day demo.

33
00:02:57,830 --> 00:03:06,040
You get a 60 day demo at flywheel for being a student at you to me for the WP dev course dot com course.

34
00:03:06,140 --> 00:03:13,730
Finally another free trial which does last for 14 days is at cloud ways which gives you a really fast

35
00:03:13,790 --> 00:03:16,170
instance at the Digital Ocean.

36
00:03:16,190 --> 00:03:23,060
If you sign up for it that way and if you just start by clicking get started and sign up for it.

37
00:03:23,150 --> 00:03:29,120
It will allow you to go through the sign up process and choose which free trial you'd like to use.

38
00:03:29,150 --> 00:03:35,930
If you go with Digital Ocean it will give you 14 days to play with a free website and you can point

39
00:03:35,930 --> 00:03:40,640
a domain name at it and get started setting up the transactional email programs.

40
00:03:42,010 --> 00:03:48,520
Whichever way you've gone about getting a live hosting program together and wordpress installed go ahead

41
00:03:48,520 --> 00:03:54,560
and log into your Wordpress dashboard at your live host and open up the dashboard here.

42
00:03:54,760 --> 00:04:01,480
I've got Greg Davis dot com open and we'll go through how to set up S-M T.P. or transactional email

43
00:04:01,600 --> 00:04:09,010
for outgoing email called as MTV email through Google dotcom first of all let's take a look at the plug

44
00:04:09,010 --> 00:04:16,630
in will be using to set up as A.P. servers through Google services in this video it's called post man

45
00:04:16,660 --> 00:04:18,010
as A.P. Mailer.

46
00:04:18,130 --> 00:04:21,640
And if you click on it you can see the header image.

47
00:04:21,730 --> 00:04:23,690
And so it'll look familiar to you.

48
00:04:23,810 --> 00:04:30,630
And even though it says that it's not quite compatible up to the Wordpress version I'm using.

49
00:04:30,700 --> 00:04:38,140
It does work and I've tested it and it's got more than 90000 installs lots of five star ratings and

50
00:04:38,140 --> 00:04:41,570
I do have the latest version of the plug in installed.

51
00:04:41,710 --> 00:04:47,770
That second post man plug in that you see they're called G-mail API extension is just his older plug

52
00:04:47,770 --> 00:04:49,390
in and it's been deprecated.

53
00:04:49,390 --> 00:04:53,120
So use the newer postman S.M. T-P mailer plug in.

54
00:04:53,470 --> 00:05:01,770
And what I'd like to do is maybe I'll just go back to the log out button and I'm going to use the last

55
00:05:01,780 --> 00:05:08,150
your password button here on the log in page to send myself an e-mail.

56
00:05:08,470 --> 00:05:19,160
I'm going to use my username and click get new password and this causes WordPress to send me an email

57
00:05:19,630 --> 00:05:23,500
and then if I don't click the confirmation link I won't have to reset my password.

58
00:05:23,500 --> 00:05:30,020
But you can use this system to force WordPress to send you an e-mail using its current S-M T.P. settings.

59
00:05:31,200 --> 00:05:37,920
So I've opened up my email client or my email program called Mozilla Thunderbird and I got this email

60
00:05:38,190 --> 00:05:44,000
and it is my password reset email and I'm not going to click this link and reset my password.

61
00:05:44,160 --> 00:05:50,220
But what I will do and I'll have you do in whatever email program you use is to somehow look at the

62
00:05:50,220 --> 00:05:53,470
source code or the headers of the email.

63
00:05:53,490 --> 00:06:01,410
So if I click more and then view source for this e-mail I can see that there is a lot of information

64
00:06:01,500 --> 00:06:08,600
up here that is in there before it goes to the actual content of the e-mail.

65
00:06:08,640 --> 00:06:14,310
Here at the bottom of this e-mail header can reveal a lot about where your e-mail is going and coming

66
00:06:14,310 --> 00:06:14,950
from.

67
00:06:15,060 --> 00:06:21,690
And you can see that as I go down here it's got the e-mail address and I can I can make sense of some

68
00:06:21,690 --> 00:06:22,740
of this stuff.

69
00:06:22,800 --> 00:06:28,520
Really there is I know that this S-G is like around my SGV dot net.

70
00:06:28,590 --> 00:06:35,190
This is actually my server itself and I can see that it's the authentication results.

71
00:06:35,340 --> 00:06:37,590
The SPF is neutral.

72
00:06:37,710 --> 00:06:46,740
If I had an a Sender Policy Framework set up inside of the domain it might say pass for giving permission.

73
00:06:46,760 --> 00:06:51,200
And that would be better than just having it neutral it's neutral.

74
00:06:51,210 --> 00:06:58,200
Let's say it's neither this this IP address which is where my e-mail was sent from is neither permitted

75
00:06:58,230 --> 00:07:05,430
nor denied by this domain which is my part of my name server and the server that I own at site Ground

76
00:07:05,430 --> 00:07:07,220
as a part of my hosting account.

77
00:07:07,440 --> 00:07:09,670
And this is my IP address.

78
00:07:09,720 --> 00:07:17,490
So if somebody were to hack into my web site itself or or into my email and start to spoof this IP address

79
00:07:18,300 --> 00:07:24,210
it wouldn't be blocked or anything like that because it's not permitted nor denied for any domain name

80
00:07:24,540 --> 00:07:31,220
and I could get my IP address or my server name here banned from sending email.

81
00:07:31,500 --> 00:07:39,360
And so I can see that that's just coming directly from from site ground and I don't actually have a

82
00:07:39,530 --> 00:07:41,670
S-M T.P. server set up.

83
00:07:41,670 --> 00:07:48,350
It's actually using the PH P mailer which is the default setting for wordpress.

84
00:07:48,510 --> 00:07:57,660
Now a best practice is to set up so that you're using an s team PC as a.p server and that it is identified

85
00:07:57,690 --> 00:08:07,500
and authenticated using some method the initial method is SPF and depends on what type of S-M T.P. server

86
00:08:07,500 --> 00:08:08,360
you using.

87
00:08:08,430 --> 00:08:15,750
But anything is better than just the default settings here especially on shared servers where somebody

88
00:08:15,750 --> 00:08:22,050
might be sharing the IP address with you and you don't know whether they're protecting their email and

89
00:08:22,050 --> 00:08:24,450
their IP address or not.

90
00:08:24,450 --> 00:08:31,920
So we're going to just close that back up and we'll go back to the Web site and I'm going to go ahead

91
00:08:31,920 --> 00:08:39,000
and log in to my Greg Davis dot com WordPress dashboard once again and look at my installed plug ins.

92
00:08:39,030 --> 00:08:40,570
And this is what I'll have you do.

93
00:08:40,590 --> 00:08:44,730
Go ahead and open up your Wordpress dashboard add the postman plug in.

94
00:08:44,730 --> 00:08:52,380
If you haven't done that yet and I'm going to go down and just activate my post man as I'm T.P. plug

95
00:08:52,380 --> 00:08:57,070
in I click activate and follow along and do the same thing.

96
00:08:57,090 --> 00:09:02,850
Now it says postman is not configured and it's mimicking out-of-the-box WordPress email delivery.

97
00:09:02,880 --> 00:09:09,120
I'm sure that right now if I did an e-mail either from the contact form or from the forgotten password

98
00:09:09,120 --> 00:09:15,660
system it would show up similarly just using the HP mailer that comes by default installed inside of

99
00:09:15,660 --> 00:09:17,190
WordPress.

100
00:09:17,190 --> 00:09:24,120
So the first thing we'll do which will be possibly one of the most common setups is to set up Google's

101
00:09:24,150 --> 00:09:31,140
Gmail as your S-M T.P. server especially for clients that use Gmail already they would have to have

102
00:09:31,140 --> 00:09:37,020
a valid gmail account or a valid Google account which is free and easy to come by and you can use Google's

103
00:09:37,120 --> 00:09:43,260
SATB server for free as long as you have a Google account and a Gmail.

104
00:09:43,310 --> 00:09:49,460
And so what I'll do is go under settings and go into the post man as anti-peace settings.

105
00:09:50,280 --> 00:09:56,550
Another thing that you'll find useful is if you go under WordPress dot org and under plug ins search

106
00:09:56,550 --> 00:10:00,000
plug ins for the post man some T.P. plug in.

107
00:10:00,000 --> 00:10:06,900
And if you go down here you can read a little bit about it but if you go to FNQ that's the frequently

108
00:10:06,900 --> 00:10:08,560
asked questions.

109
00:10:08,670 --> 00:10:17,070
There is a great little set of instructions and a video about setting up the Google SSTV server in post

110
00:10:17,090 --> 00:10:24,060
man and I followed these with great success to set up Google as my SMTP server and I'll have you do

111
00:10:24,060 --> 00:10:24,750
the same thing.

112
00:10:24,840 --> 00:10:32,400
If you don't already go to Google dot com and get yourself a G-mail e-mail address it's easy and free

113
00:10:32,640 --> 00:10:36,200
to do this kind of set up for yourself.

114
00:10:36,200 --> 00:10:43,280
So I'll go back to Greg Davis dot com and I'm going to go ahead and start the wizard.

115
00:10:43,300 --> 00:10:53,160
This is an easy way to set up configuration using postman S-M T.P. and the email for me in Google is

116
00:10:53,160 --> 00:11:00,000
going to be my gmail address which is different than the address that my browser thinks that I have.

117
00:11:00,000 --> 00:11:05,790
So I'll just put that e-mail address in there and again follow along with your own Gmail account pause

118
00:11:05,790 --> 00:11:08,210
the video if you need to to get it set up.

119
00:11:08,550 --> 00:11:14,800
Now at gmail the man plug it knows that it's S-M T.P. dot gmail dot com.

120
00:11:14,820 --> 00:11:24,420
So since that's correct I'll just click next and now it is checking to see what the G-mail provider

121
00:11:24,420 --> 00:11:27,210
offers and what the Wordpress host allows.

122
00:11:27,220 --> 00:11:31,890
This has some dependencies on whether your host is strong enough to use it.

123
00:11:31,890 --> 00:11:39,390
But what we're going to be doing is what it recommends to get overthe 2.0 authentication which is one

124
00:11:39,390 --> 00:11:43,460
of the best is to use Gmail on port 587.

125
00:11:43,620 --> 00:11:52,690
So let's go ahead and do that with the off 2.0 selected and I'll just hit next and now here's where

126
00:11:52,690 --> 00:11:59,140
I have to have a little bit of setup I need to set up a client id for a web application.

127
00:11:59,220 --> 00:12:05,090
And that's where I got that information from WordPress dot org right here and I used the this link to

128
00:12:05,090 --> 00:12:11,360
the Google developer's console and I set that up following these instructions.

129
00:12:11,440 --> 00:12:12,870
So go ahead and do that.

130
00:12:13,000 --> 00:12:21,430
Now I'm going to need to put in a Client ID and a client secret so that I don't have to store my e-mail

131
00:12:21,430 --> 00:12:27,700
password in the Wordpress database and I can authorize Google to be my email sender from WordPress for

132
00:12:27,700 --> 00:12:29,370
transactional emails.

133
00:12:29,740 --> 00:12:35,950
And so by going back to here and opening the Google developers con. I've got a tab open in my browser

134
00:12:35,950 --> 00:12:44,410
here where you can see I've got the console dot developers dot Google dot com Web site open and I am

135
00:12:44,410 --> 00:12:49,710
logged in with my profile which is that same email address.

136
00:12:49,830 --> 00:12:54,940
The gmail address that I have at Google that I had set up inside of post man.

137
00:12:55,000 --> 00:13:01,600
And so with this open I followed those instructions and if I click credentials right here you can see

138
00:13:01,840 --> 00:13:05,900
that I've set up I've set up a client ID.

139
00:13:05,950 --> 00:13:13,690
And I just named it post man as a.p so that I would know what it's called and I could refer to it later.

140
00:13:13,720 --> 00:13:17,530
And so I have a client id and a client secret here.

141
00:13:17,560 --> 00:13:24,220
So if I just hit Control C and I hope you're following along and doing the same thing by pausing the

142
00:13:24,220 --> 00:13:31,870
video now I need a client secret from this oh off 2.0 client right here and then see I click client

143
00:13:31,870 --> 00:13:38,710
secret Control-C to copy and back at my web site control the.

144
00:13:38,740 --> 00:13:42,150
And now if I just hit next it says I'm done.

145
00:13:42,250 --> 00:13:48,970
When I hit finish it'll save the settings and then I grant permission with the email provider for postman

146
00:13:48,970 --> 00:13:51,210
to send send email.

147
00:13:51,280 --> 00:13:54,780
So I'll finish right here I don't need my browser.

148
00:13:54,790 --> 00:13:59,860
OK so now I have a little red line over here and I've configured it but I have not received permission

149
00:13:59,860 --> 00:14:01,320
to use it from google yet.

150
00:14:01,420 --> 00:14:09,070
So if I just click the grant permission as long as I'm logged in with my gmail account it asks me if

151
00:14:09,070 --> 00:14:17,190
I would like to allow Google to use Gmail to send with the Greg Davis dot com domain name.

152
00:14:17,440 --> 00:14:24,130
And so even if you're using a temporary domain at your live server this will still work using a temporary

153
00:14:24,130 --> 00:14:24,880
domain.

154
00:14:24,940 --> 00:14:32,670
And so I'll just click allow right now and it navigates right back and it says the 2.00 the off 2.00

155
00:14:32,670 --> 00:14:36,040
authorization was successful and it's ready to send email.

156
00:14:36,190 --> 00:14:38,630
And it says postman is configured.

157
00:14:39,190 --> 00:14:44,560
Now you can use the send a test mail link or we can do that same thing you know all I'm going to do

158
00:14:44,560 --> 00:14:53,780
is log out of Wordpress I'm going to go to the last your password and again I'm just going to choose

159
00:14:53,780 --> 00:14:56,580
my username and click get new password.

160
00:14:56,690 --> 00:15:01,790
This will generate that email again and this time when that e-mail goes to my email client my email

161
00:15:01,790 --> 00:15:06,740
program will look at the source code and see what the differences are.

162
00:15:07,910 --> 00:15:16,130
So I've gone into my email program again and I opened the email that was sent from WordPress this time.

163
00:15:16,160 --> 00:15:21,760
You can see that the From address is actually different the from address is my gmail account.

164
00:15:21,920 --> 00:15:27,580
So I know that that post man S.M. T.P. setting that I made just now is working.

165
00:15:27,590 --> 00:15:34,530
And let's take a look at the view sourceless take a look at the source code above the e-mail content.

166
00:15:34,550 --> 00:15:40,820
First of all the first thing I notice is that there is a DKIM signature there's some signature and authentication

167
00:15:40,820 --> 00:15:43,420
messages right here inside of the header.

168
00:15:43,760 --> 00:15:51,050
And you can see that if I look at the authentication results I'm getting some different places that

169
00:15:51,050 --> 00:15:52,670
e-mail is coming from.

170
00:15:52,670 --> 00:16:01,310
I can see there's a different IP address the SPF results are pass instead of that neutral that I had

171
00:16:01,310 --> 00:16:02,500
in the last e-mail.

172
00:16:02,510 --> 00:16:07,910
Now the From address is my gmail address and so potentially you or your client might want to set up

173
00:16:07,970 --> 00:16:14,100
a special gmail address for your business rather than using a client's personal Gmail address.

174
00:16:14,120 --> 00:16:21,860
If they do have one so you can see that you know it's been the same Tepes been from Google dot com.

175
00:16:21,920 --> 00:16:27,320
There's a DKIM authentication which is another secondary authentication.

176
00:16:27,320 --> 00:16:34,790
On top of SPF another layer of authentication and that one also gives us a message of past.

177
00:16:34,910 --> 00:16:37,970
So that is a really good email setup.

178
00:16:38,890 --> 00:16:45,250
If I look also over here you know the authentication results and it's received from a different IP address

179
00:16:45,250 --> 00:16:46,210
than my own.

180
00:16:46,210 --> 00:16:49,110
This is actually an IP address at Google dot com.

181
00:16:49,300 --> 00:16:56,200
And because we trust Google to map to manage their email sending We're using their SMPTE server because

182
00:16:56,200 --> 00:16:57,930
it is excellent.

183
00:16:58,180 --> 00:16:59,050
Oh great.

184
00:16:59,050 --> 00:17:02,570
And the X male areas from this actual plug in.

185
00:17:02,590 --> 00:17:06,340
And that's fine to have that inside of my e-mail header.

186
00:17:06,340 --> 00:17:14,350
And again I just get the same message that I got before someone's requested a password reset if I don't

187
00:17:14,590 --> 00:17:16,210
click that password reset.

188
00:17:16,270 --> 00:17:18,100
I don't have to change my password.

189
00:17:18,190 --> 00:17:20,620
I'm just testing the e-mail headers.

190
00:17:20,620 --> 00:17:28,270
So we've successfully set up Google to send our e-mail for us from our WordPress Web site.

191
00:17:28,270 --> 00:17:30,450
Congratulations.

192
00:17:30,630 --> 00:17:36,150
In this lesson you use the word Bresse Web site at your live server to set up transactional e-mail sending

193
00:17:36,330 --> 00:17:39,180
through an external EQ as a.p server.

194
00:17:39,450 --> 00:17:45,330
You set it up using a Google account and a gmail address so that your WordPress website can send email

195
00:17:45,330 --> 00:17:48,150
in an upgraded fashion in the next video.

196
00:17:48,210 --> 00:17:54,420
We use another even more powerful e-mail server to send transactional email through our WordPress system

197
00:17:55,020 --> 00:18:00,270
while Google lets you send up to ninety nine emails per day with their free servers send grids free

198
00:18:00,270 --> 00:18:00,660
account.

199
00:18:00,660 --> 00:18:06,340
Limits are much higher allowing 1000 emails a day for the first week and going up from there.

200
00:18:06,420 --> 00:18:09,390
They allow 12000 emails a month with their free level