15 actionable steps to protect your inbox from spam, phishing, and data breaches. Check off each item as you complete it.
Use an authenticator app, not SMS. Authy or Google Authenticator are great options.
Visit Have I Been Pwned to see if your email has been leaked in any breaches.
Revoke access to apps you no longer use. Check your email provider's security settings regularly.
Use fake.legal for one-time registrations, downloads, and sketchy websites.
Use contact forms instead of displaying your email. Bots constantly scrape websites for addresses.
Check your email provider's spam settings and turn the filter to aggressive mode.
Gmail allows yourname+shopping@gmail.com. This helps identify who sells your data.
Hover over links to see the real URL before clicking. When in doubt, go directly to the website.
Even from people you know - their account might be compromised.
Scammers use lookalike domains (e.g., "paypa1.com" or "arnazon.com").
Most email providers have a "Report phishing" button. Use it to help others too.
Only from legitimate senders. For spam, just mark as spam and delete.
Use JustDeleteMe to find deletion links for various services.
Services like ProtonMail offer end-to-end encryption.
Get a free temporary email in seconds — no signup required.
Get Temp Mail