Encrypt emails?

Your best bet would be a plugin called WP Mail SMTP, though it’s only marked as being compatible as of WP 3.2.1 (but it should reasonably work with WP 3.3.1).

Just to define the process …

  1. Visitor enters site and fills out form on your page.
  2. User submits the form, which is transmitted to your server via a secure connection (HTTPS).
  3. Your server packages the submitted form data and sends it in an email to another location.

Step #3 is where you need some added security. By default WP uses mail() to send messages. But the plugin I mentioned above overrides this and allows you to send messages using SMTP. It further allows you to specify SSL/TLS encryption.

I can’t guarantee this will stand up to a HIPPA security audit, it’s your responsibility to conduct the due diligence there. But if you want to be sure submitted data is encrypted and secure from the time the browser submits the data to when it appears in your inbox, this is your best off-the-shelf bet.

Related Posts:

  1. Simplest two-way encryption using PHP
  2. Are the default salts secure?
  3. Subscribe to email for security fixes?
  4. Moving away from MD5: Where to declare the custom global $wp_hasher?
  5. Using an Encryption class in a WordPress Plugin
  6. How to get real password (before encrypt) when register a user?
  7. How to redirect all HTTP requests to HTTPS
  8. What’s the best approach for generating a new API key?
  9. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  10. how fix “this certificate cannot be verified up to a trusted certification authority”
  11. How can bcrypt have built-in salts?
  12. Getting a List of Currently Available Roles on a WordPress Site?
  13. What’s the easiest way to stop WP from ever logging me out
  14. How safe / sanitized is wp_insert_posts()?
  15. From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
  16. Why are passwords exportable as plain text in WordPress?
  17. Is there a way to force ssl on certain pages
  18. What is the purpose of having a token in cookies?
  19. How to remove “Connection Information” requirement on localhost install of WP on MACOSX
  20. How is password strength calculated?
  21. Regular security checks – what steps should be included?
  22. What are the pros and cons of using a custom front-end to retrieve content from a WordPress back-end
  23. Do Cookies Need to be Sanatized Before Being Saved?
  24. Is WP vulnerable when updating plugins or themes?
  25. Disable external access to REST API Endpoint
  26. What is the wp-includes/certificates/ca-bundle.crt used for?
  27. Do you need to escape hard coded plain text?
  28. Garbage in beginning of wp-config.php – was this WP installation compromised?
  29. Handling nonces for actions from guests to logged-in users
  30. What is the relationship between cURL, WordPress and cacert.pem?
  31. Is it necessary to use esc_url with template tags such as get_permalink?
  32. How to prevent bot or someone to modify any file automatically?
  33. How to disable XML-RPC from Linux command-line in a total way?
  34. HTTP Security Headers in wp-config
  35. Staging Site: Made Public – Security Questions
  36. Best Way to Enable Two Step Authentication
  37. Single sign-on: wp_authenticate_user vs wp_authenticate
  38. How to allow internal links using wp_kses filtration
  39. Securing a multi-user permission structure
  40. How does Cross Site Scripting (XSS) work exactly? [closed]
  41. Is default functions like update_post_meta safe to use user inputs?
  42. No option “I would like my site to be private, visible only to users I choose” in Privacy Settings
  43. How does the “authentication unique keys and salts” feature work?
  44. vs WordPress Security
  45. esc_html__ security : what for in this example?
  46. Securing wp-config leads to sensitive information leak on wp-settings
  47. Suspicious Files
  48. What’s the point of forbidding access to wp-config.php?
  49. wp-json and what data does it give away?
  50. Is is necessary to use security plugin for wordpress? [closed]
  51. neccessary?
  52. XML-RPC errors they know my username?
  53. Sniffing wordpress user’s credentials
  54. Is [admin / admin] acceptable for all local websites?
  55. What may be causing failure of auto-install features in WordPress (v3.0.3)?
  56. Client side HTTP parameter pollution (reflected)
  57. Local file inclusion critical security issue [closed]
  58. my wordpress website is suspended [closed]
  59. Display encrypted content on my website
  60. XMLRPC slow and weird websites/services
  61. iTheme Security always lockout my account [closed]
  62. Is it sensible to worry about sanitizing admin input in plugin custom CSS?
  63. WordPress Front end Form – Enable to Submit PHP Codes
  64. Is it safe to hand over the admin rights?
  65. Is it safe use wp_editor in public contact form
  66. Is WordPress MultiSite secure & how much can it scale? [closed]
  67. How to find exploited wordpress plugin [closed]
  68. How I can open back door for myself?
  69. How safe is current_user_can()?
  70. Is it safe to give wordpress directories ownership to www-data?
  71. How can I force a specific password?
  72. Do we need to escape data that we receive from theme options?
  73. Why does WordPress change a file’s permissions?
  74. Side effects of disallowing *.php requests in production environment?
  75. Outgoing new connection to linked Websites – why?
  76. My Site keeps crashing due to the wp-confg file being deleted
  77. Someone keeps changing my SITEURL (mysql injection or xss?) [closed]
  78. Who updates the wp-admin/core file?
  79. How WordPress sanitizes post content on save? Or it doesn’t?
  80. Replace domain in database
  81. What highest security brake with wordpress and static files?
  82. Spam in WordPress root folder
  83. HSTS header not being added correctly
  84. Can WordPress admin user + database credentials be used to gain Cpanel or FTP access?
  85. Links to root domain from search engines don’t work, but direct links and links from other referrers do
  86. Cannot access wp admin of WordPress website (security plugin issue) [closed]
  87. Why are the latest visits to my website originating from my own website?
  88. Secure Multiple WordPress Installations on shared hosting
  89. How do I hide WordPress users from security scanning?
  90. Background Updates Not Happening
  91. wp-config.php file and code injection
  92. Able to go to WordPress admin even after deleting auth cookies from request headers
  93. FORCE_SSL_ADMIN affecting subdomains
  94. What is the best security $_POST method?
  95. Is WordPress ready for GDPR compliance? [closed]
  96. Bank account number and Sort Code in a form [closed]
  97. Move data from wp-config to another file
  98. Heartbleed: What is it and what are options to mitigate it?
  99. OpenVPN vs. IPsec – Pros and cons, what to use?
  100. How to test if my server is vulnerable to the ShellShock bug?

Leave a Comment