Email Setup (Resend / SMTP)

Several features depend on email: account verification, password resets, contact-form replies, support tickets and newsletters. On many hosts the default PHP mail function is unreliable or blocked, so configure a proper sender in Settings before you launch.

Reply-To

Mail is sent from a no-reply address, so without a Reply-To a reader who answers your newsletter is writing into nothing. Spam filters also weigh a sender that cannot be replied to.

Put a real mailbox there. If the address does not exist, replies bounce back at the person who wrote them, which is worse than no reply address at all. Check that mail actually arrives at it before you fill the field in. Leave it blank and no Reply-To header is sent, which is safe.

Delivery events (Resend)

Add a webhook in Resend pointing at https://yoursite.com/webhooks/resend, subscribe it to email.bounced and email.complained, and paste its signing secret into Settings, Email.

Dead addresses and spam complaints are then removed from the newsletter list on their own. This matters more than it sounds. Sending accounts are suspended once bounces pass roughly 5% or complaints pass 0.1%, and it is the same account your password reset emails go through, so a list quietly collecting dead addresses eventually breaks the ability to log in.

Leave the secret blank and the endpoint refuses everything, which is the safe default: without it, anyone who found the URL could empty your list.

Only permanent bounces remove an address. A full mailbox is temporary, and unsubscribing a real reader over it would be worse than the problem.

Two options

• Resend (recommended). Paste an API key. It is simple to set up and has strong deliverability.
• SMTP. Enter the host, port, username and password from your mail provider.

Get it right

• Set a from-name and a from-address on your own domain.
• Add the sender records your provider asks for (such as SPF and DKIM) so mail is not marked as spam.
• Send a test email from the admin and confirm it arrives before you go live.

Without this step, password resets and verification emails may silently fail to arrive, which blocks new accounts.