turboSMTP logo

turboSMTP SMTP Settings and Configuration (2026)

Last verified Sep 14, 2026

Native SMTP relay, the relay is the product

turboSMTP exposes a standards-plain SMTP relay on pro.turbo-smtp.com, included on every plan from the free tier up. Use port 465 with SSL/TLS and authenticate with a Consumer Key and Consumer Secret from the dashboard, not your account email and password, which stopped working for SMTP on April 15, 2025.

turboSMTP is one of the few providers where the relay came first and the HTTP API arrived later: API v2 only shipped on October 6, 2021. It shows, anything that speaks SMTP AUTH, from WP Mail SMTP and Magento 2 to ERPNext, Auth0 or a bare smtplib script, connects with no SDK and no JSON payload. The closest relay-first peers on SMTPedia are SMTP2GO, MailerSend, Elastic Email and Brevo. turboSMTP’s differentiators are prepaid credit blocks and euro pricing, set against a documentation estate that contradicts itself in places, every contradiction we found in official sources is flagged below.

Quick reference

SMTP serverpro.turbo-smtp.com (EU accounts: pro.eu.turbo-smtp.com)
Port SSL/TLS465 RECOMMENDED – implicit TLS from connect
Port submission (plain)587 – documented as plain SMTP, not as STARTTLS
Alternative ports25025 (alternate SSL), 2525 (alternate plain), 25 (legacy, avoid)
UsernameYour Consumer Key from the dashboard API Keys page
PasswordYour Consumer Secret – shown exactly once at generation time

One credential pair drives both paths: the same Consumer Key and Secret authenticate SMTP AUTH on the relay and the consumerKey / consumerSecret headers on the API. Official reference: turboSMTP email client setup.

SMTP configuration

SMTP

turboSMTP relay endpoint

Transactional and bulk outbound mail from any client, CMS, ERP or script that speaks SMTP AUTH.

Hostname
pro.turbo-smtp.com
EU accounts use pro.eu.turbo-smtp.com, documented in the official Symfony Mailer bridge. Region placement is an account-level choice, confirm with support before hardcoding it.
Port and encryption
465 · SSL/TLS
The only port turboSMTP describes in its own words as a secure connection. Fall back to 25025 if 465 is filtered, and to 587 or 2525 only when no SSL port is reachable.
Authentication
AUTH LOGIN / PLAIN
Documented as “SMTP Authentication: Enabled” and, for Thunderbird, “Use name and password”. There is no OAuth path for the relay.
Credential format
Consumer Key / Consumer Secret
Generated under API Keys in the dashboard. The Secret is displayed once and cannot be retrieved later, capture it before closing the dialog or you will regenerate the pair and re-edit every client.

Setup steps

  1. Open the API Keys page in the dashboard and generate a key. Copy the Consumer Key and Consumer Secret into your secrets store immediately, the Secret is never shown again.
  2. In the client, CMS or application, set the outgoing server to pro.turbo-smtp.com, port 465, encryption SSL/TLS. In WP Mail SMTP that is the Other SMTP mailer with Encryption set to SSL.
  3. Enable SMTP authentication, then paste the Consumer Key into the username field and the Consumer Secret into the password field. Not your login email and password, those have not authenticated the relay since April 15, 2025.
  4. Add the SPF and DKIM records for the sending domain (see Authentication), wait for propagation, then verify the domain on the dashboard’s DNS Record page.
  5. Switch the account to “Send without modification” in the Client Area, send a test, and confirm in Analytics that the envelope sender is your domain and not a turbo-smtp.com bounce address.

Step 5 is a separate manual action, not an automatic consequence of verification. Accounts that finish DNS setup and stop there keep relaying through a rewritten envelope sender indefinitely, the commonest reason a correctly configured turboSMTP domain still fails DMARC.

Authentication

SPF and DKIM setup

turboSMTP asks for two DNS records plus a dashboard verification step. Publish the SPF include, then the DKIM selector, then wait, the official guide says to allow 48 hours for propagation before returning to the DNS Record page to enable authentication.

; 1. SPF - add the include to your EXISTING record, never create a second one
your-domain.com.   TXT   "v=spf1 include:spf.turbo-smtp.com ?all"

; 2. DKIM - value copied from your dashboard DNS Record page
turbo-smtp._domainkey.your-domain.com.        TXT   "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDT3MWLni6so1q9eQggRYBCLHFjohZkCnYHH8gZNDBm6zRrodRVpWpJQW7x3cWWiuBhS1X0IfBB80l5tqFa+yc+mVgnk8tkUzOHFbPQPp4fi7egTpMtsQW/ZMrxw73SItNvPr72qvJTYZNPxarMx+ULjEWybcfEdXHPY8jslGcpCwIDAQAB"

; 3. Same key on the mail subdomain - covers mail from subdomains
turbo-smtp._domainkey.email.your-domain.com.  TXT   "k=rsa; p=<same key>"

Three cautions. The marketing DNS guide prints the include as include:turbo-smtp.com while the knowledgebase prints include:spf.turbo-smtp.com; the knowledgebase value is more specific and more recently maintained, but read it off your own dashboard before committing. Two SPF records on one domain break authentication outright, so merge the include into the existing v=spf1 string. And turboSMTP publishes one fixed RSA public key rather than minting a per-customer keypair, your d= domain is yours, but the key material is shared and rotation is a platform event you do not control, unlike MailerSend or SMTP2GO. Reference: turboSMTP DKIM article.

DMARC alignment

turboSMTP supports DMARC but publishes no prescriptive policy value. What matters sits upstream of the policy record: until the domain is verified and the account is switched to “Send without modification”, turboSMTP re-envelopes outbound mail. The envelope sender becomes a VERP-form address such as bounce+rcpt=example.com@turbo-smtp.com, and a Sender header is appended so DKIM signs against turboSMTP’s DNS. SPF then authenticates turbo-smtp.com rather than you, alignment fails, and Gmail shows the “via turbo-smtp.com” annotation.

The sequence that works: publish _dmarc at p=none with an rua address, complete verification, flip to send without modification, then read two weeks of aggregate reports confirming both SPF and DKIM align before moving to quarantine and then reject. Tightening the policy while re-enveloping is active will quarantine your own transactional mail.

_dmarc.your-domain.com.   TXT   "v=DMARC1; p=none; rua=mailto:dmarc@your-domain.com; fo=1"

Rate limits & sending caps

turboSMTP meters by volume purchased, not by published throughput ceilings. No emails-per-hour figure, recipients-per-message cap or concurrent-connection limit appears anywhere in official documentation, and the FAQ answers the throughput question qualitatively. The table reports only what is published.

LimitValueNotes
Free plan volume200 emails/dayValid for the first 6 months. Relay, API and SPF/DKIM all included.
Basic plan volume15,000 emails/monthFrom EUR 14.95/month. Subaccounts included since August 5, 2025.
Pro plan volume100,000 to 2.5M/monthFrom EUR 79.95/month. Adds dedicated IP, custom routing, 365-day analytics.
Maximum message size30 MB relay / under 24 MB APISources disagree: FAQ says 30 MB, OpenAPI spec says under 24 MB. Base64 inflates payloads about 33%, so 24 MB is roughly 18 MB of raw attachments.
Hourly rate, recipients, connectionsNot publishedNo official figure for any of the three. The only documented control is a per-subaccount SMTP cap set through the API.



Two billing behaviours sit on top of the caps. Free-plan emails are consumed before paid-plan credits, so upgrading does not reset the counter the way most people expect. And prepaid credit blocks, roughly EUR 0.79 to EUR 0.98 per 1,000 emails, expire one year after purchase. The prepaid model suits bursty senders; it punishes over-buying against a forecast.

Common setup gotchas

Your account password will not authenticate the relay, and has not since April 2025

On April 15, 2025 turboSMTP made API Key authentication mandatory for SMTP, replacing account passwords with Consumer Key / Secret pairs. Every tutorial written before that date has the wrong credential fields, and the commonest failure today is pasting a login email and password into WP Mail SMTP. Generate the pair under API Keys first. Two consequences follow: the Secret is displayed once and cannot be recovered, and because relay and API share one pair, revoking a Consumer Key breaks every mail client holding it at the same instant it breaks your API calls.

turboSMTP never uses the word STARTTLS, and its own Thunderbird guide sets security to None

turboSMTP splits its ports into two buckets: plain SMTP on 25, 587 and 2525, SSL on 465 and 25025. The word STARTTLS appears nowhere in official documentation, and the Thunderbird article walks users through port 25 with connection security set to None. Clients negotiate STARTTLS on 587 opportunistically because it is the IANA submission port, but with no published guarantee a misconfigured client can relay credentials in the clear. Use 465 with SSL/TLS. Never port 25: it is blocked by default on AWS, GCP, Azure and DigitalOcean, and by most consumer ISPs.

Unverified domains get re-enveloped, and DMARC alignment dies silently

An unverified sending domain is not rejected. turboSMTP rewrites the envelope sender to a turbo-smtp.com address and signs DKIM against its own DNS, stating only that this “may result in a lower delivery rate”. The cost is larger than that: SPF authenticates turboSMTP rather than you, alignment fails, Gmail shows a “via” annotation, and a p=quarantine or p=reject policy leaning on SPF can fail your own mail. The fix is two steps: verify DNS, then switch the account to “Send without modification” in the Client Area.

Official sources contradict each other, and the settings page has a live typo in the hostname

The documentation has drifted between marketing site and knowledgebase, and the contradictions land on exactly the values a configuration page must get right. Message size is 30 MB in the FAQ and under 24 MB in the OpenAPI spec. The SPF include is include:turbo-smtp.com in the marketing DNS guide and include:spf.turbo-smtp.com in the knowledgebase. And the SMTP Settings page prints the hostname as pro.turbo-stmp.com – stmp, not smtp, which readers paste straight into a mail client and then debug for an hour as a DNS failure. The correct host is pro.turbo-smtp.com. Note the brand split too: the company markets as turboSMTP, its site and dashboard live on serversmtp.com, the mail and API hosts on turbo-smtp.com.

Migrating SMTP setups

Moving to turboSMTP

The relay is standards-plain, so migration is a four-field edit: hostname to pro.turbo-smtp.com, port 465, encryption SSL/TLS, credentials swapped for a Consumer Key and Secret. Nothing in the envelope or headers changes. Do the DNS work in parallel: publish the turboSMTP include alongside your current provider’s in the same v=spf1 record and add the DKIM selector, so both authenticate during the cutover and traffic moves gradually.

Carry the suppression list across before the first send – POST /api/v2/suppressions/import exists for this, and skipping it means re-mailing addresses that already bounced. Coming from Elastic Email or Brevo, export it before you cancel, not after. Plan a warm-up if you take the Pro-tier dedicated IP.

Moving away from turboSMTP

Leaving is symmetrical, with three turboSMTP-specific items. Remove include:spf.turbo-smtp.com and delete the turbo-smtp._domainkey selectors only after the queue has drained, or you will produce DKIM failures on mail already sent. Export analytics before the subscription lapses, retention is tier-bound at 365 days on Pro, and GET /api/v2/analytics/csv is the clean way to take it. And time the move against your prepaid credit balance, not the renewal date: credits expire one year after purchase and are not refunded.

Remember the Consumer Key does double duty: revoking it breaks any script, plugin or CRM still calling the API, not just the mail clients. Inventory both surfaces first. Comparable relay-first destinations include SMTP2GO and MailerSend.

Frequently asked questions

What are the turboSMTP SMTP server settings?

Server pro.turbo-smtp.com, port 465 with SSL/TLS, authentication enabled, username = Consumer Key, password = Consumer Secret. EU accounts use pro.eu.turbo-smtp.com. Ports 587 and 2525 are plain-SMTP fallbacks, 25025 an alternate SSL port. Beware the typo pro.turbo-stmp.com on one official knowledgebase page.

Should I use port 587 or 465 with turboSMTP?

Use 465. turboSMTP classifies its ports as plain SMTP (25, 587, 2525) or SSL (465, 25025) and never documents STARTTLS on 587, so 465 with implicit TLS is the only configuration it describes as encrypted. Use 587 or 2525 only if your host blocks 465, and 25025 when you need SSL but 465 is filtered.

Why is my turboSMTP username and password not working?

Almost certainly because you are using your account email and login password. Since April 15, 2025 the relay accepts only a Consumer Key / Secret pair generated under API Keys. The Key goes in the username field, the Secret in the password field. The Secret is shown once and cannot be retrieved, so if you did not save it, generate a new pair.

How do I set up turboSMTP in WP Mail SMTP?

Choose the Other SMTP mailer, set SMTP Host to pro.turbo-smtp.com, Encryption to SSL, SMTP Port to 465, Authentication on. Enter the Consumer Key as username and the Consumer Secret as password, ideally via the WPMS_SMTP_PASS constant in wp-config.php rather than the database. turboSMTP also ships its own WordPress plugin and a multi-provider mailer, Pro Mail SMTP.

Does turboSMTP support TLS or SSL encryption?

SSL, explicitly, on ports 465 and 25025 – implicit TLS from connect. STARTTLS on 587 is not documented or guaranteed, even though most clients attempt it. Treat 465 as the encrypted configuration and 587 as unencrypted unless you have verified the negotiation with a protocol trace.

How many emails can I send per day on the turboSMTP free plan?

Up to 200 emails per day, valid for the first 6 months. It is an extended trial rather than a permanent free allowance, and free accounts are actively policed. Free-plan emails are also consumed before paid-plan volume, so upgrading mid-month does not reset the counter.

AAlaa Touil RRabeb How we test →

This review follows our email infrastructure testing methodology. We disclose affiliate relationships in our editorial independence policy.