Join our Agency Partners program! Package up your services and resell hosting with Flywheel

Join Now!

Help articles Security

How does Flywheel protect email?

Flywheel uses some of the web’s most trusted email infrastructure providers to handle the email sent by your sites. We work in tandem with these providers to ensure email deliverability and prevent valid messages from ending up in someone’s spam folder.

Because mail is routed through our partner services,  emails are not sent from your server’s IP address. Rather, they are sent from a pool of IP addresses hosted by our providers, which our operations team actively monitors for performance and reputation. Due to the shared nature of these email IP addresses, it is unlikely but still possible that they can end up on Spam blacklists, which may temporarily hinder mail deliverability from your site. If that happens, our team is notified and intervenes on behalf of our sites.

Spam filtering and email integrity

Proactive Malware Scan

All outgoing mail from your sites passes through a spam filtering system that looks for key signs of malicious activity before it is ever sent on to our partner email servers. These include malicious links, spoofed FROM or CC addresses, and more.  Additionally, we set monthly email limits for each site to ensure that they aren’t sending out massive spam campaigns. A highly unusual spike in emails in a short period of time will automatically trigger a temporary shutdown on email sending from the site. Our agents will then investigate to see if the outgoing mail is indeed suspicious.

Flywheel’s built-in layers of site security already provide a baseline level of protection as well by preventing many of the popular attack methods employed by malware authors. You can read more about Flywheel’s security measures here.


If you expect a spike in email, or are having trouble with site emails being sent, be sure to contact Flywheel Support as soon as possible. We’ll be happy to work with you to make sure things continue running as smoothly as possible.

Recommended security steps

Protect Your Forms
Malware authors love unsecured contact and comment forms. If you’ve set up email notifications on your site for new form entries or comments, it’s possible that some spam links or suspicious data could be headed from your site to your inbox. For that reason, we highly recommend the use of CAPTCHA fields to make submitters prove that they are, in fact, not robots. Another additional method is employing a hidden honeypot field that automated bots will complete, but actual human traffic will not. Many popular WordPress form-builders offer a honeypot functionality as a core feature or as an add-on service.

Set up an external mail service for your site
For sites where sending a high volume of automated emails from inside WordPress is a core function, you might want to look into dedicated 3rd-party solutions for site mail. This ensures a dedicated account that will a lot less prone to email blacklists. It will additionally surface more metrics for you to observe things like deliverability. Flywheel recommends both MailGun and SendGrid for external mail delivery.

Was this article helpful?

  • Billing & Accounts

    Questions relating to payments, billing and managing your account on Flywheel.

    15 Articles
  • Blueprints

    Learn everything there is to know about what Blueprints are, how to create them and how to make the best use of them.

    5 Articles
  • Database

    How to access your WordPress database to make changes and update content.

    3 Articles
  • Domain Names

    Details about how to manage DNS and point your domain names at Flywheel.

    16 Articles
  • Frequently Asked

    The most commonly asked questions, and a few we just think you should know.

    27 Articles
  • General Questions

    Questions that don't fit elsewhere, or those about Flywheel in general.

    56 Articles
  • Getting started

    Everything you need to know to get your first Flywheel site up and running.

    18 Articles
  • Local by Flywheel

    Everything you need to know about our amazing, free local WordPress development software for Mac and PC.

    20 Articles
  • Organizations

    Everything you need to know about managing your team with our Organizations feature.

    8 Articles
  • Plugins

    Which plugins work best, which plugins work worst, and everything in between.

    7 Articles
  • Security

    Details about everything Flywheel does to makes your site so secure.

    16 Articles
  • SFTP

    Information on setting up and troubleshooting with SFTP connections and file transfers.

    5 Articles
  • Simple SSL

    All there is to know about our free, automatically installed and activated SSL certificates.

    8 Articles
  • Staging

    How to get the most out of Staging, which allows you to duplicate a site, make changes, and then push those changes to the live site.

    6 Articles
  • White Label

    Everything you need to know about our Whitelabel subscriptions for branding and reselling Flywheel.

    3 Articles

Flywheel help

Help is just a click away! Log into the Flywheel dashboard to instantly chat with an expert, open a ticket, or follow along with in-depth documentation. We happily offer support 24 hours a day, 7 days a week, 365 days a year!

Log in

Try it yourself. It's free & takes less than 60 seconds. Sign up