Configure email service

By default, the core functions of Infisical work without any email service configuration. Without email service, basic sign up/login and secret operations will function without any issue. However, the following functionality will be disabled.

Multi-factor authentication
Sending invite links via email for projects to teammates
Sending alerts such as suspicious login attempts

Configuration

If you choose to setup email service, you need to configure the following SMTP environment variables:

SMTP_HOST: Hostname to connect to for establishing SMTP connections.
SMTP_USERNAME: Credential to connect to host (e.g. [email protected])
SMTP_PASSWORD: Credential to connect to host.
SMTP_PORT: Port to connect to for establishing SMTP connections.
SMTP_SECURE: If true, the connection will use TLS when connecting to server with special configs for SendGrid and Mailgun. If false (the default) then TLS is used if server supports the STARTTLS extension.
SMTP_FROM_ADDRESS: Email address to be used for sending emails (e.g. [email protected]).
SMTP_FROM_NAME: Name label to be used in From field (e.g. Team).

Below you will find details on how to configure common email providers:

Create an account on Resend.
Add a Domain.

adding resend domain

Create an API Key.

creating resend api key

Go to the SMTP page and copy the values.

go to resend smtp settings

With the API Key, you can now set your SMTP environment variables variables:

SMTP_HOST=smtp.resend.com
SMTP_USERNAME=resend
SMTP_PASSWORD=YOUR_API_KEY
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your email address being used to send out emails
SMTP_FROM_NAME=Infisical

Remember that you will need to restart Infisical for this to work properly.

Create an account and configure SendGrid to send emails.
Create a SendGrid API Key under Settings > API Keys
Set a name for your API Key, we recommend using “Infisical,” and select the “Restricted Key” option. You will need to enable the “Mail Send” permission as shown below:

creating sendgrid api key

setting sendgrid api key restriction

With the API Key, you can now set your SMTP environment variables:

SMTP_HOST=smtp.sendgrid.net
SMTP_USERNAME=apikey
SMTP_PASSWORD=SG.rqFsfjxYPiqE1lqZTgD_lz7x8IVLx # your SendGrid API Key from step above
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your email address being used to send out emails
SMTP_FROM_NAME=Infisical

Remember that you will need to restart Infisical for this to work properly.

Create an account and configure Mailgun to send emails.
Obtain your Mailgun credentials in Sending > Overview > SMTP

obtain mailhog api key estriction

With your Mailgun credentials, you can now set up your SMTP environment variables:

SMTP_HOST=smtp.mailgun.org # obtained from credentials page
[email protected] # obtained from credentials page
SMTP_PASSWORD=password # obtained from credentials page
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your email address being used to send out emails
SMTP_FROM_NAME=Infisical

Create an account and configure AWS SES to send emails in the Amazon SES console.
Create an IAM user for SMTP authentication and obtain SMTP credentials in SMTP settings > Create SMTP credentials

opening AWS SES console

creating AWS IAM SES user

With your AWS SES SMTP credentials, you can now set up your SMTP environment variables:

SMTP_HOST=email-smtp.ap-northeast-1.amazonaws.com # SMTP endpoint obtained from SMTP settings
SMTP_USERNAME=xxx # your SMTP username
SMTP_PASSWORD=xxx # your SMTP password
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your email address being used to send out emails
SMTP_FROM_NAME=Infisical

Remember that you will need to restart Infisical for this to work properly.

Create an account and configure SocketLabs to send emails.
From the dashboard, navigate to SMTP Credentials > SMTP & APIs > SMTP Credentials to obtain your SocketLabs SMTP credentials.

opening SocketLabs dashboard

obtaining SocketLabs credentials

With your SocketLabs SMTP credentials, you can now set up your SMTP environment variables:

SMTP_HOST=smtp.socketlabs.com
SMTP_USERNAME=username # obtained from your credentials
SMTP_PASSWORD=password # obtained from your credentials
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your email address being used to send out emails
SMTP_FROM_NAME=Infisical

The SMTP_FROM_ADDRESS environment variable should be an email for an authenticated domain under Configuration > Domain Management in SocketLabs. For example, if you’re using SocketLabs in sandbox mode, then you may use an email like [email protected].

SocketLabs domain management

Remember that you will need to restart Infisical for this to work properly.

Create an account and enable “less secure app access” in Gmail Account Settings > Security. This will allow applications like Infisical to authenticate with Gmail via your username and password.

Gmail secure app access

With your Gmail username and password, you can set your SMTP environment variables:

SMTP_HOST=smtp.gmail.com
[email protected] # your email
SMTP_PASSWORD=password # your password
SMTP_PORT=587
SMTP_SECURE=true
[email protected]
SMTP_FROM_NAME=Infisical

As per the notice by Google, you should note that using Gmail credentials for SMTP configuration will only work for Google Workspace or Google Cloud Identity customers as of May 30, 2022.

Put differently, the SMTP configuration is only possible with business (not personal) Gmail credentials.

Create an account and configure Office365 to send emails.
With your login credentials, you can now set up your SMTP environment variables:

SMTP_HOST=smtp.office365.com
[email protected] # your username
SMTP_PASSWORD=password # your password
SMTP_PORT=587
SMTP_SECURE=true
SMT[email protected]
SMTP_FROM_NAME=Infisical

Create an account and configure Zoho Mail to send emails.
With your email credentials, you can now set up your SMTP environment variables:

SMTP_HOST=smtp.zoho.com
SMTP_USERNAME=username # your email
SMTP_PASSWORD=password # your password
SMTP_PORT=587
SMTP_SECURE=true
[email protected] # your personal Zoho email or domain-based email linked to Zoho Mail
SMTP_FROM_NAME=Infisical

You can use either your personal Zoho email address like [email protected] or a domain-based email address like [email protected]. If using a domain-based email address, then please make sure that you’ve configured and verified it with Zoho Mail.

Remember that you will need to restart Infisical for this to work properly.

Overview

Platform

Self-host Infisical

Command line

Integrations

Infrastructure Integrations

3rd-party Integrations

Framework Integrations

Security

Configure email service

Configuration

Overview

Platform

Self-host Infisical

Command line

Integrations

Infrastructure Integrations

3rd-party Integrations

Framework Integrations

Security

​Configuration

Configuration