Privacy-First Email: A Guide for the Paranoid (and the Practical)
From basic hygiene to extreme compartmentalization - a tiered guide to email privacy. What everyone should do, what privacy-conscious users should add, and what the truly paranoid need.
What Is ARC (Authenticated Received Chain) and Why Email Forwarding Needs It
ARC allows email forwarders to preserve authentication results across hops. Learn how Authenticated Received Chain works, who supports it, and why it complements SRS rather than replacing it.
Business Email Compromise (BEC): The Most Expensive Email Attack You Have Never Heard Of
Business Email Compromise costs organizations billions every year, yet most people have never heard of it. Unlike flashy ransomware attacks, BEC relies purely on social engineering - no malware, no malicious links. Learn how these attacks work, why they succeed, and how to defend against them.
How to Protect Your Company Email from Phishing: A Practical Guide
A layered approach to defending your business email against phishing - from DNS authentication to employee training to relay filtering.
What Email Providers Don't Tell You About Your Privacy
What Gmail, Outlook, and Yahoo actually do with your email data - scanning, tracking, metadata collection, and what you can do about it.
Email Security for Freelancers: Protect Your Professional Reputation
A practical email setup for freelancers - custom domain, alias per client, spam protection, and professional appearance on a budget.
DMARC Alignment Explained: Why Authentication Alone Is Not Enough
Passing SPF and DKIM is not enough for DMARC. Learn what identifier alignment means, the difference between relaxed and strict modes, and why forwarding breaks SPF alignment but preserves DKIM alignment.
How to Audit Your Email Infrastructure for Security Weaknesses
Your MX records are public. Your SMTP banner reveals your software. Your TLS config may be outdated. Here is a step-by-step security audit of your email infrastructure using free tools - and how to fix what you find.
What Is Two-Factor Authentication and Why You Need It
Passwords alone are not enough to protect your accounts. Two-factor authentication adds a critical second layer of security - but not all 2FA methods are created equal. Learn how TOTP apps, hardware keys, and backup codes work, and why your email security is the foundation of it all.
Someone Signed Up for Services Using My Email Address - What to Do
Getting emails for accounts you never created? Here is why strangers use your email to sign up, how to stop it, and how to protect yourself.
Email Encryption Explained: TLS vs PGP vs S/MIME
Three encryption technologies, three different problems solved. TLS encrypts the connection. PGP encrypts the message. S/MIME does both with certificates. Here is when you need which.
Why We Created Shield: Your Inbox Should Respect Your Schedule
You should decide when email arrives, how much of it, and from whom. Shield gives every alias its own rate limiter, delivery schedule, and sender approval list.
