SendGrid will no longer allow basic authentication. Is WP Mail SMTP affected?

  • Resolved gavin310

    (@gavin310)


    4 years ago

    We use WP Mail SMTP with SendGrid. Today we got an email from SendGrid saying that on December 9th they will stop allowing basic authentication requests. It said we received the email because in the past 180 days we have used basic authentication with our API requests.

    Is this something that WP Mail SMPT needs to update, or is it something in our SendGrid settings?

    Here is the full email from SendGrid:

    Hello <name>,

    We are emailing to inform you of an upcoming requirement to update your authentication method with Twilio SendGrid to API keys exclusively by December 9th, 2020 in order to ensure uninterrupted service and improve the security of your account. Our records show that you have used basic authentication with username and password for one or more of your API requests with 1 users of your SendGrid account in the last 180 days.

    Why API keys?
    This is an effort to enhance security for all of our users. Using your account username and password for authentication is less secure than using an API Key. Unlike your username and password, API Keys are uniquely generated and can be set to limit the access and specify permissions for a given request.

    What action is required?
    Follow these steps to identify and replace your authentication method to API Keys and then implement Two-Factor Authentication (2FA) for enhanced security.

    What happens if no action is taken?
    On December 9th, 2020 we will no longer accept basic authentication with username and password, and we will be requiring 2FA to login to your account. If you attempt to authenticate your API requests or SMTP configuration with username and password for any of your users after that date, your requests will be rejected.

    We’d like to thank you in advance for your prompt attention to these requirements. If you’d like to learn more about how you can enhance the security of your account, view this post. If you have any questions or need assistance, please visit our documentation or reach out to our Support team.

    Thank you,
    The Twilio SendGrid Team

Viewing 5 replies - 1 through 5 (of 5 total)
  • mattseymour1

    (@mattseymour1)

    +1

    We’ve had the same email to interested in this response.

    Plugin Author Gregor Capuder

    (@capuderg)

    Hi @gavin310 and @mattseymour1,

    thank you very much for providing the email Sendgrid sent you.

    Our plugin only uses the API key to authenticate and send email requests to their API. As you can see, in our plugin settings for the Sendgrid mailer, you only have to input the API key.

    This change from Sendgrid should not affect our plugin.

    Did you maybe use Sendgrid integration with some other tools? Did you ever have to input the username and password for the Sendgrid integration with any app?

    Thank you for reporting this and have a nice day!

    mattseymour1

    (@mattseymour1)

    Thanks @capuderg – really helpful.

    Hi all,
    In our account we were using
    <add key=”mailAccount” value=”…” />
    <add key=”mailPassword” value=”….” />
    private async Task configSendGridasync(IdentityMessage message)
    {
    var myMessage = new SendGridMessage();
    myMessage.AddTo(message.Destination);
    myMessage.From = new System.Net.Mail.MailAddress(
    …, ..);
    myMessage.Subject = message.Subject;
    myMessage.Text = message.Body;
    myMessage.Html = message.Body;
    // var credentials = new NetworkCredential(“….., ….);

    var credentials = new NetworkCredential(
    ConfigurationManager.AppSettings[“mailAccount”],
    ConfigurationManager.AppSettings[“mailPassword”]
    );

    // Create a Web transport for sending email.
    var transportWeb = new SendGrid.Web(credentials);

    // Send the email.
    if (transportWeb != null)
    {
    await transportWeb.DeliverAsync(myMessage);
    }
    else
    {
    Trace.TraceError(“Failed to create Web transport.”);
    await Task.FromResult(0);
    }
    }
    }
    but suddenly in producction it stopped working , we should also use api key ?

    Plugin Author Gregor Capuder

    (@capuderg)

    Hi @shreyansh8263,

    this is the support forum for the WP Mail SMTP WordPress plugin.

    It looks like you are using some custom code/integration. You should contact SendGrid support directly and ask that question, but it looks like you are using basic authentication (username/password combination), so my short answer would be: yes.

    But again, please contact SendGrid support for further clarification.

    Take care!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘SendGrid will no longer allow basic authentication. Is WP Mail SMTP affected?’ is closed to new replies.