SMTPKeepFor IT admins and MSPs
Scan-to-email keeps working after Microsoft turns off SMTP basic auth.
At the end of December 2026 Microsoft disables basic authentication for SMTP AUTH in Exchange Online by default. Copiers, scanners, NAS boxes and older apps that log in to smtp.office365.com with a password start failing. SMTPKeep takes their mail over plain SMTP and sends it through your own Microsoft 365 mailbox with Microsoft's modern Graph API.
No card for the trial. Sign in with your Microsoft 365 work account.
Why not just use a mail service like SMTP2GO or SendGrid?
Mail stays in your tenant
Messages are sent by your own mailbox, so they appear in its Sent Items and stay under your retention, journaling and DLP policies. Nothing is routed through a third-party sending platform.
No DNS changes
Mail goes out from Microsoft 365 with the SPF and DKIM you already have. No new sending domains, no IP warm-up, no records to add for each client.
Nothing to install on site
No Linux box, Docker container or Windows service at each office. Change the SMTP server, username and password on the device and you are done.
How it works
- Connect a tenant. A Global Administrator approves the SMTPKeep app once. It gets one permission: send mail. Optionally restrict it to specific mailboxes with a one-line Exchange policy.
- Add a device. Pick the mailbox it should send as. SMTPKeep creates a unique username and password for that device.
- Point the device at SMTPKeep. Server
smtp.smtpkeep.com, port 587, STARTTLS, the device's username and password. Send a test from the dashboard.
Old copiers welcome
Port 2525 accepts devices limited to TLS 1.0 or 1.1, which Microsoft stopped accepting years ago.
Large scans
Attachments up to 35 MB are delivered using Graph upload sessions.
Per-device control
Each device has its own login, sender mailbox, optional IP allow-list and activity log. Revoke one without touching the others.
Pricing
- Unlimited devices per tenant
- Up to Microsoft's sending limits for each mailbox
- MSP dashboard for all your clients
- 14-day free trial, cancel any time
A tenant is one Microsoft 365 organization. You are billed for connected tenants only.
Questions
Can SMTPKeep read our mailboxes?
No. The only permission SMTPKeep asks for is Mail.Send. It cannot read, list or delete mail. Message contents pass through in memory and are never stored; the activity log keeps only time, device, recipient count, size and result.
Can't we just re-enable basic auth?
For existing tenants, yes, for a while. Microsoft has said it will announce a final removal date in the second half of 2027, and tenants created after December 2026 never get basic auth. SMTPKeep lets you move devices once, on your schedule.
What about Microsoft's own options?
A connector relay needs a static IP and only suits sites with one; Direct Send only reaches recipients inside your organization; High Volume Email is limited to internal recipients; and OAuth SMTP requires device firmware that many copiers will never get. SMTPKeep works with any device that can send authenticated SMTP over TLS.
Where is SMTPKeep hosted?
In Toronto, Canada. Mail is handed to Microsoft 365 over TLS and Microsoft delivers it.