About this plugin
Your website and your business email usually live on the same hosting account, but you keep switching between the WordPress dashboard and an old webmail screen. TiboMail brings your mailbox into WordPress.
Connect the mailbox you created in cPanel, Plesk, DirectAdmin or any other host (or Gmail, Outlook, Yandex, iCloud) and read, reply, forward and organize your mail in a modern three-pane inbox, without leaving your dashboard.
Setup in under a minute
Type your email address and password. TiboMail finds the server settings for you:
- It reads the mail client auto-configuration your hosting panel publishes (cPanel “Connect Devices” / autoconfig).
- It tries the standard settings hosting panels use: mail.yourdomain.com, IMAP 993 SSL/TLS, SMTP 465 SSL/TLS, the full email address as username.
- Popular providers (Gmail, Outlook/Hotmail, Yandex, iCloud, Yahoo) are configured automatically.
You can always enter the server details by hand.
A nicer inbox
- Three-pane layout: folders, message list, reading pane. Works on phones too.
- Unread, starred and attachment filters, server-side search.
- Reply, reply all and forward (with the original attachments), rich text editor, signature, drag and drop attachments.
- Sent messages are saved to your Sent folder, so they also show up in webmail and on your phone.
- Star, mark read/unread, move to folder, mark as spam, delete. Changes sync both ways with the mail server.
- Keyboard shortcuts (c, r, f, j/k, /, Del).
Never miss a message
- Desktop notifications and a sound when new mail arrives, on any admin screen.
- Unread counter in the admin bar and on the menu.
- “Latest messages” dashboard widget.
- Forward new mail to another address: a short notice with a link, or a full copy.
Secure by design
- Your password is stored encrypted (libsodium) with a key derived from your site’s secret keys, and is only sent to your own mail server.
- HTML emails are shown in a sandboxed frame; scripts and forms are removed.
- Remote images (tracking pixels) are blocked until you allow them, per message or per sender.
- Only administrators can use the mailbox (changeable with the tibomail_capability filter).
- No third-party service: TiboMail connects straight from your site to the mail server you configure (see “External services”). No ext-imap needed; it works on PHP 8.4.
Bonus: better delivery for WordPress emails
Optionally send WordPress’s own emails (WooCommerce orders, password resets, contact forms) through the same mailbox, so they come from your real mail server and land in the inbox instead of spam.
For online shops: when a customer writes “#1234” or “sipariş no 1234”, TiboMail finds the WooCommerce order and shows its status, total, items and cargo tracking above the message. Ready-made replies (order received, shipped, return request, delay, stock) fill in the customer name, order number and tracking link for you.
Privacy
- No telemetry, no tracking, no ads in the admin panel and no remote license checks.
- Messages stay on your mail server; only a small cache (headers, previews and recently opened bodies) is kept in your database.
- Uninstalling removes the cache table and every option the plugin created. Your mail on the server is never touched.
Pro add-on
com/eklentiler/tibomail/. It adds mail rules and filters, a smarter spam filter, auto-replies, a shared team inbox with assignments, and WooCommerce customer context next to each message.
No feature of this plugin is locked or time-restricted. Everything described above works fully on its own, with as many mailboxes as you like (info@, sales@, support@ …), without the add-on.
Languages
English, with a complete Turkish (Türkçe) translation included. org.
Source code
js and the stylesheets) are the original, human-readable source code. They are written by hand and are not generated, bundled or minified by any build tool, so there is nothing to compile.
External services
TiboMail only talks to servers you choose yourself, and only after you add a mailbox. There is no telemetry, no CDN and no remote licensing in this plugin.
- Your IMAP and SMTP mail server (the host you enter or confirm in the setup wizard, e.g. mail.yourdomain.com, imap.gmail.com). The plugin connects to it to list, read, move and delete messages (IMAP) and to send mail you write (SMTP), plus a background sync every five minutes (WP-Cron) and while the dashboard is open. Sent: your mail username and password, and the messages you send. This is the mail provider you already use; its own terms and privacy policy apply (for example Google: https://policies.google.com/privacy, Microsoft: https://privacy.microsoft.com/privacystatement, Yandex: https://yandex.com/legal/confidential/).
- Mail auto-configuration lookup (only when you click Connect in the setup wizard): the plugin requests https://autoconfig.<your-domain>/mail/config-v1.1.xml and https://<your-domain>/.well-known/autoconfig/mail/config-v1.1.xml on the domain of the email address you typed. Sent: your email address (as the emailaddress parameter). These URLs are served by your own hosting panel (e.g. cPanel), so your host’s terms and privacy policy apply.