The solution is simple: Get another email account for security-related functions. It’s time to stop mixing communication and authentication in the same email account. I don’t blame these sites for using email addresses for security: Email is the only universal account, and I much prefer emailed verification than some kind of proprietary authentication, handing over even more power to Facebook, Google, or Twitter! Get a “Backstop” Email Account We also use our email accounts as a verification factor for password resets and to receive intensely-personal information from our banks, doctors, and so on. It’s a feature, not a bug!īut we don’t just use email to chat and do business. So email protocols are fundamentally insecure by design. Since you want it to work everywhere and go everywhere, it’s designed with the lowest common denominator in mind. This is one reason email is fundamentally insecure. And it’s useful to have email alerts “bust through” your lock screen. You want your email to be accessible whether you’re at home, at work, or on the road. There’s really no way to fix this, and it’s not Google’s fault or anyone else’s. And this is especially true of our “daily” email accounts: If you’re receiving email on your phone, iPad, and computers at home and work you’re leaving yourself vulnerable to account highjacks. Even with TLS and good passwords it’s far too easy to snoop, phish, or stumble into someone’s email account. Best of all, it’s free! ProtonMail offers various account tiers and options, but the free account is good enough to be a “backstop” for account verification Insecure EmailĮmail is not secure.
I don’t usually advocate for specific products, but I’m 100% on-board with this recommendation: Stop what you’re doing, go get a ProtonMail account, and use it as the verification account for your online self! ProtonMail is much more secure than any other mail provider and is the ideal place for password resets and bank account statements.
0 kommentar(er)
