- No spoofing. do not use admin user's email(!) when using wp_mail() - Do not set from email and name in headers - Attempt to re-create WordPress core's defaults in "from" input field. - Disabled input field "from" in not required.