Connect a seller-owned SMTP mailbox

Create the SMTP credential

1. 1

   Use a dedicated business mailbox.

   Avoid a personal mailbox and decide who owns recovery and rotation.

2. 2

   Enable multi-factor authentication.

   Create a provider-issued app password when normal mailbox passwords are not permitted for SMTP.

3. 3

   Confirm the provider server details.

   Use the SMTP hostname supplied by the mailbox provider.

4. 4

   Open Settings → Customer communications → Email.

   Enter the sender name, SMTP host, sender address, password, and reply-to.

5. 5

   Choose the TLS mode.

   Vacto supports port 465 with direct TLS or port 587 with STARTTLS.

6. 6

   Save securely.

   The password is encrypted at rest, versioned on rotation, and never returned after save.

Test and authenticate the domain

1. 1

   Run Health check.

   This verifies the saved SMTP connection without exposing the secret.

2. 2

   Send one test email to an explicitly authorized address.

   Confirm the exact From name, Reply-To, links, English/Arabic direction, and formatting.

3. 3

   Inspect inbox and spam placement.

   Provider acceptance is not proof of inbox delivery.

4. 4

   Configure SPF, DKIM, and DMARC.

   Publish and validate the records appropriate to the actual sender and SMTP provider.

5. 5

   Review provider sending limits.

   Limits and anti-abuse policies apply; Vacto does not advertise unlimited email.

Rotation, disconnection, and limitations

• Changing the mailbox password may invalidate SMTP credentials.
• Disconnecting Vacto removes its encrypted credential; also revoke the app password at the provider when access is no longer needed or may be compromised.
• The From address must match the authenticated SMTP sender.
• A transactional provider may be more appropriate as volume grows.