Switch to Protonmail Reason #45: Keep a recovery address harder for attackers to guess

An obvious recovery address gives attackers a predictable target for reset attempts and phishing.

Why this matters

An obvious recovery address gives attackers a predictable target for reset attempts and phishing. Privacy is easier to defend before this information is collected than after it has spread.

The protection

Proton recommends considering aliases or plus addressing for recovery identities, along with two-factor authentication.

Take action

Use a distinct recovery address and secure that mailbox too. An alias helps only if the underlying account is protected. Email protection depends on the route and settings. Ordinary mail involving outside providers is not automatically end-to-end encrypted, and email metadata is not universally hidden.

Sources

Proton Mail security checklist.