Guides

A compromised signup address can become a permanent target for phishing if it is your only identity.

One widely published address invites spam and makes unrelated parts of your life easier to correlate.

An address tied to one provider can make leaving that provider costly, even when its privacy terms disappoint you.

A protected first message is only half a conversation if the response returns through ordinary email.

Security that requires elaborate setup is easy to postpone until after a sensitive exchange has already happened.

Your inbox contains purchases, relationships, and plans; it should not be a convenient input to a corporate profile.

A mailbox breach can expose years of intimate content if the server stores it in readable form.

Messages about a diagnosis, debt, or a dispute can remain in a mailbox for years.

Changing a stored contact detail could redirect a private message or call toward an attacker.

A contact book can expose the identities and personal details of many people besides you.

Malicious attachments and scam campaigns often arrive as ordinary-looking mail.

A link can display one name while sending you to a lookalike login page.

A fake invoice or reset notice can take credentials in minutes.

A quiet account takeover can continue while you assume your mailbox is safe.

A stolen password can give an intruder access to your inbox and the reset links for many other accounts.

A secure-looking inbox does not mean every route to an outside recipient had end-to-end protection.

A changed key can be legitimate, but it deserves attention before confidential mail goes out.

Encryption to the wrong key can defeat the point of a protected message.

A contact's unwillingness to change providers does not have to force plaintext email.

A sensitive link should not stay available indefinitely after its purpose ends.