Admin Panel / People / Email now offers an explicit opt-in switch, custom SMTP and every well-known service bundled with Nodemailer, including Gmail, Outlook365, SendGrid, Mailgun, Postmark and the AWS SES regions. Each service keeps its own settings. Passwords are saved and consumed only on the server; the admin-only publication exposes merely whether one exists, and a blank password keeps the stored secret.

Positive and negative transport tests cover custom SMTP, named services, MAIL_URL fallback and non-admin rejection. A browser regression covers the form and verifies that the password never reaches the client’s settings collection.

The settings schema now retains the selected service, its non-secret fields and the server-only password map. The Email pane owns its admin-only publication, so it receives the safe password-present flag whether it is rendered from People or Settings.

Playwright token login now reuses an already loaded page and its authenticated Meteor connection. It performs a full reload only when changing away from a different logged-in user, eliminating the repeated development-bundle loads that left waitForMeteor waiting until the test timeout.