Follow best practices for email security.

Best Practice Checklist: Secure Your Email Communications

Avoid Suspicious Attachments & Links

• Never open attachments or click links from unknown or untrusted senders.

• Hover over links to preview the destination before clicking.

• Verify sender details—phishing emails often spoof legitimate contacts.

• Report suspicious emails to IT or your email provider.

Use Strong, Unique Passwords

• Create complex passphrases (e.g., 3–4 random words with symbols).

• Never reuse passwords across accounts.

• Use a password manager to store and generate strong passwords.

Enable Two-Factor Authentication (2FA)

• Activate 2FA on your email account and other critical services.

• Use app-based authenticators like Google Authenticator or Authy over SMS.

• Secure backup codes in a safe, offline location.

Keep Software and Email Clients Updated

• Enable auto-updates where possible.

• Manually check for updates regularly for your OS, browser, antivirus, and email client.

• Patch known vulnerabilities quickly to reduce exposure.

Limit Personal Info Shared via Email

• Avoid sharing sensitive data like ID numbers, passwords, or payment info via email.

• Use encryption for any confidential communication.

• Educate staff on what should and shouldn’t be sent over email.

Be Phishing-Aware

• Watch for urgency, poor grammar, and unfamiliar senders.

• Use anti-phishing tools or browser extensions.

• Regularly train employees on phishing recognition techniques.