Title: Duva Mail
Author: Duva.ca
Published: October 2, 2026
Last modified: October 2, 2026
---
Search plugins
# Duva Mail
By [Duva.ca](https://profiles.wordpress.org/duvamail/)
[Download](https://downloads.wordpress.org/plugin/duva-mail.0.1.0.zip)
* [Details](https://xho.wordpress.org/plugins/duva-mail/#description)
* [Reviews](https://xho.wordpress.org/plugins/duva-mail/#reviews)
* [Installation](https://xho.wordpress.org/plugins/duva-mail/#installation)
* [Development](https://xho.wordpress.org/plugins/duva-mail/#developers)
[Support](https://wordpress.org/support/plugin/duva-mail/)
## Description
WordPress sends its emails with the web server’s mail function, which is often unreliable
and ends up in spam. **Duva Mail** replaces that transport: every email sent with`
wp_mail()` (WooCommerce orders, contact forms, password resets, comment notifications,
any plugin) is submitted to your [Duva](https://duva.ca) account over HTTPS.
* Works with anything that calls `wp_mail()`: the plugin hooks the core `pre_wp_mail`
filter, so WordPress keeps its usual contract (`true` on success, `false` and
the `wp_mail_failed` action on failure).
* Respects the `wp_mail_from`, `wp_mail_from_name` and `wp_mail_content_type` filters,
and reads `From`, `Reply-To`, `Cc`, `Bcc` and `Content-Type` headers (strings
or arrays, `Name ` recipients).
* Attachments from local files (10 files and 5 MB in total, as accepted by the
Duva API).
* No silent fallback: if Duva cannot take the email, `wp_mail()` returns `false`,`
wp_mail_failed` fires, and the failure is shown in **Settings > Duva Mail** and
as an admin notice. The email is never sent by another transport behind your
back.
* Safe retries: each email carries an idempotency key, so a network timeout is
retried without ever creating a duplicate. Quota and client errors are never
retried.
* API key kept out of the browser: the settings field never displays it, and you
can define it in `wp-config.php` instead (`DUVA_MAIL_API_KEY`).
* No telemetry, no tracking, no calls to any server other than the API address
you configure.
#### What you need
A Duva account with a verified sending domain, and an API key created for that domain
in the Duva dashboard.
#### Things to know before you install
* **Emails are sent from your Duva domain only.** If WordPress (or a plugin) sets
a sender on another domain, Duva Mail sends from your default sender address
and puts the original sender in `Reply-To`, so contact-form replies still reach
the visitor.
* **Cc and Bcc**: the Duva API sends one copy per recipient, each addressed only
to its own recipient. Cc and Bcc addresses therefore receive their own copy;
the other recipients are not shown on it.
* **Only `text/plain` and `text/html` emails** are supported. If an email has only
an HTML body, Duva adds a plain-text version generated from it. Raw `multipart/*`
bodies are refused with an explicit error.
* **PHPMailer is bypassed.** Plugins that customize PHPMailer (the `phpmailer_init`
action) or that add their own SMTP settings have no effect on emails sent through
Duva.
* The API refuses some custom headers (for example `Return-Path`, `Message-ID`);
the email then fails with a message that names the header. See the FAQ.
### External services
This plugin sends your site’s emails to the Duva API, a third-party service, at
the API address set in the settings (default `https://api.duva.ca`). It is the plugin’s
only purpose and the only external connection it makes.
* **What is sent, and when:** for each email WordPress sends, the sender, the recipients,
the subject, the body, any attachments and custom headers are sent to Duva so
that it can deliver the email. The “Check the connection” and “Send a test email”
buttons also contact the API. Each request carries your API key, the language
of the site (to localize error messages) and a user agent with the plugin, WordPress
and PHP versions.
* **What is not sent:** nothing else about your site, your users or your visitors,
and nothing is sent when no email is sent.
* Duva terms of use: https://duva.ca/en/terms
* Duva privacy policy: https://duva.ca/en/privacy
## Screenshots
[⌊The settings screen: connection status, API address, sending domain, API key (
never displayed), default sender, and the buttons to check the connection and send
a test email.⌉⌊The settings screen: connection status, API address, sending domain,
API key (never displayed), default sender, and the buttons to check the connection
and send a test email.⌉[
The settings screen: connection status, API address, sending domain, API key (never
displayed), default sender, and the buttons to check the connection and send a test
email.
[⌊The "Latest failures" table with the HTTP status, the Duva error code and a message,
shown after a failed test email.⌉⌊The "Latest failures" table with the HTTP status,
the Duva error code and a message, shown after a failed test email.⌉[
The “Latest failures” table with the HTTP status, the Duva error code and a message,
shown after a failed test email.
[⌊The admin notice shown when the plugin is active but not configured.⌉⌊The admin
notice shown when the plugin is active but not configured.⌉[
The admin notice shown when the plugin is active but not configured.
## Installation
1. Upload the `duva-mail` folder to `/wp-content/plugins/`, or install the zip from**
Plugins > Add New > Upload Plugin**.
2. Activate the plugin.
3. Go to **Settings > Duva Mail** and enter your sending domain and API key.
4. Click **Send a test email**.
Optional: to keep the API key out of the database, add this line to `wp-config.php`(
it then takes precedence, and the settings field is hidden):
```
define( 'DUVA_MAIL_API_KEY', 'dv_...' );
```
## FAQ
### The plugin is active but my emails are not sent.
Open **Settings > Duva Mail**: the status shows whether the plugin is configured,
and the failure log shows the latest errors (HTTP status, error code and message).
A `404` means the API key is unknown, revoked, expired, or belongs to another domain;
a `403` that the domain is not verified yet or the account is not allowed to send;
a `429` that a rate limit or your sending quota was reached.
### Does it fall back to the default WordPress mailer when Duva fails?
No, on purpose. A silent fallback would send transactional emails from an unverified
server and hide the problem. The failure is returned to the caller (`wp_mail()`
returns `false`), logged, and displayed to administrators.
### Does it work with WooCommerce, Contact Form 7, Gravity Forms…?
Yes, as long as they send through `wp_mail()`. Check that the sender address they
use is on your sending domain; otherwise Duva Mail replaces it by the default sender
address of the settings and keeps the original in `Reply-To`.
### Why are my Cc and Bcc recipients not shown to each other?
The Duva API has no Cc or Bcc fields: it sends one copy per recipient. Duva Mail
adds your Cc and Bcc addresses as recipients, so each of them receives the email,
but nobody sees the others.
### Why was an email refused because of a header?
The Duva API only accepts `X-*` headers (except the ones reserved by the platform)
and a short list of standard ones: `List-Unsubscribe`, `List-Unsubscribe-Post`, `
List-Id`, `In-Reply-To`, `References`, `Auto-Submitted`, `Precedence`, `Importance`,`
Feedback-ID`. Headers such as `Return-Path`, `Message-ID` or `DKIM-Signature` are
refused. Remove them from the code that sends the email.
### What happens with attachments?
Local files are read and sent with the email, up to 10 files and 5 MB in total.
Executable and script extensions (`.exe`, `.js`…) are refused. Accounts that are
still in the Duva sandbox cannot send attachments. Beyond a limit, the email fails
with an explicit error and is not sent.
### Can I add tags, metadata or open tracking?
Yes, with the `duva_mail_payload` filter, which receives the request body and the`
wp_mail()` arguments just before the request is sent, and returns the body to send:`
add_filter( 'duva_mail_payload', function ( $payload ) { $payload['tags'] = array('
wordpress' ); return $payload; } );`
### Where is the API key stored?
In the `duva_mail_settings` option, or nowhere in the database if you define `DUVA_MAIL_API_KEY`
in `wp-config.php` (recommended). The key is never sent to the browser, shown in
a page, written to the failure log or included in an error message.
### What does the failure log contain?
Error messages only: no API key, no email content, no full email addresses (they
are masked). It keeps the 20 latest failures and can be cleared.
### What happens to my data when I uninstall?
Deleting the plugin removes its options (settings, failure log, status). Emails
already submitted to Duva stay in your Duva account.
### Does it support multisite?
Settings are per site. Network activation is not specifically supported yet.
## Reviews
There are no reviews for this plugin.
## Contributors & Developers
“Duva Mail” is open source software. The following people have contributed to this
plugin.
Contributors
* [ Duva.ca ](https://profiles.wordpress.org/duvamail/)
[Translate “Duva Mail” into your language.](https://translate.wordpress.org/projects/wp-plugins/duva-mail)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/duva-mail/), check
out the [SVN repository](https://plugins.svn.wordpress.org/duva-mail/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/duva-mail/) by [RSS](https://plugins.trac.wordpress.org/log/duva-mail/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 0.1.0
* First version: `pre_wp_mail` interception, settings screen, connection check,
test email, failure log.
## Meta
* Version **0.1.0**
* Last updated **1 day ago**
* Active installations **Fewer than 10**
* WordPress version ** 5.9 or higher **
* Tested up to **7.1.2**
* PHP version ** 7.4 or higher **
* Language
* [English (US)](https://wordpress.org/plugins/duva-mail/)
* Tags
* [email](https://xho.wordpress.org/plugins/tags/email/)[password reset](https://xho.wordpress.org/plugins/tags/password-reset/)
[transactional email](https://xho.wordpress.org/plugins/tags/transactional-email/)
[woocommerce](https://xho.wordpress.org/plugins/tags/woocommerce/)[wp_mail](https://xho.wordpress.org/plugins/tags/wp_mail/)
* [Advanced View](https://xho.wordpress.org/plugins/duva-mail/advanced/)
## Ratings
No reviews have been submitted yet.
[Your review](https://wordpress.org/support/plugin/duva-mail/reviews/#new-post)
[See all reviews](https://wordpress.org/support/plugin/duva-mail/reviews/)
## Contributors
* [ Duva.ca ](https://profiles.wordpress.org/duvamail/)
## Support
Got something to say? Need help?
[View support forum](https://wordpress.org/support/plugin/duva-mail/)