By default, WordPress uses the PHP Mail function to send emails from your website. It is recommended to use SMTP as it will significantly increase the reliability of the emails that are being sent from your website.
With Google’s Captcha (reCAPTCHA) enabled, on your login page, you will be asked to confirm that you are not a robot after you provide your username and password. It is an effective way to prevent brute-force attacks on your WordPress admin panel.
In WordPress, there’s a small file called wp-cron.php, which simulates normal cron-jobs. With the exception that this file isn’t executed every at a certain amount of minutes. Instead, WP-Cron will be executed each time someone visits your website.