Best secure email to use instead of gmail?

Questions on how we spend our money and our time - consumer goods and services, home and vehicle, leisure and recreational activities
dharma student
Posts: 31
Joined: Mon Jan 13, 2014 3:22 pm

Re: Best secure email to use instead of gmail?

Post by dharma student »

For privacy use startmail.com
User avatar
c.coyle
Posts: 183
Joined: Thu Aug 03, 2017 5:10 pm
Location: Eastern Pa.

Re: Best secure email to use instead of gmail?

Post by c.coyle »

VTSAX - 50%, VBTLX - 50%
bac
Posts: 81
Joined: Sun Apr 01, 2018 6:19 pm

Re: Best secure email to use instead of gmail?

Post by bac »

User avatar
Rowan Oak
Posts: 668
Joined: Mon May 09, 2016 2:11 pm
Location: Yoknapatawpha

Re: Best secure email to use instead of gmail?

Post by Rowan Oak »

JoMoney wrote: Fri Aug 16, 2019 8:15 am
jebmke wrote: Fri Aug 16, 2019 8:12 am ... Sometimes people throw out the term "security" when they are really more concerned about privacy.
I would think saying "security" includes confidentiality/privacy.
I agree and it should.

With gmail/goolge since you are the product there's just not going to be privacy between you and google, but if you accept that, the next concern are any third party apps/accounts that you have given access to your gmail account. This is a major problem with gmail/google privacy and many users are unaware or have forgotten that they set this up.

Follow these steps to check if you've given any 3rd party apps/accounts access to your gmail account:
How to remove third party access from Gmail?
Remove site or app access
Go to your Google Account.
On the left navigation panel, select Security.
On the Third-party apps with account access panel, select Manage third-party access.
Select the site or app you want to remove.
Select Remove Access.
https://support.google.com/accounts/ans ... 6521?hl=en
“If you can get good at destroying your own wrong ideas, that is a great gift.” – Charlie Munger
RubyTuesday
Posts: 469
Joined: Fri Oct 19, 2012 11:24 am

Re: Best secure email to use instead of gmail?

Post by RubyTuesday »

ARoseByAnyOtherName wrote: Fri Aug 16, 2019 9:27 pm - set up two factor authentication on all sites that allow it. Despite the temptation do NOT use your password manager as a 2FA/OTP app also. Use a dedicated third party app such as Authy.
Thanks for the great list... I’m In the process of setting all of this up.

Question about the quoted bullet above... not sure what this means. Could you elaborate? FWIW, I use a keepass (locked with long random string) and drop box as my password management approach, but keepass isn’t used as a 2fa or OTP app. Not sure what you’re suggesting I need authy for assuming I’ve setup Yubikey 2fa for Gmail/google voice etc.
“Doing nothing is better than being busy doing nothing.” – Lao Tzu
ARoseByAnyOtherName
Posts: 1000
Joined: Wed Apr 26, 2017 12:03 am

Re: Best secure email to use instead of gmail?

Post by ARoseByAnyOtherName »

RubyTuesday wrote: Sun Nov 03, 2019 9:04 am
ARoseByAnyOtherName wrote: Fri Aug 16, 2019 9:27 pm - set up two factor authentication on all sites that allow it. Despite the temptation do NOT use your password manager as a 2FA/OTP app also. Use a dedicated third party app such as Authy.
Thanks for the great list... I’m In the process of setting all of this up.

Question about the quoted bullet above... not sure what this means. Could you elaborate? FWIW, I use a keepass (locked with long random string) and drop box as my password management approach, but keepass isn’t used as a 2fa or OTP app. Not sure what you’re suggesting I need authy for assuming I’ve setup Yubikey 2fa for Gmail/google voice etc.
Glad you find it helpful!

Regarding the quote, the short answer is if you're using Keepass for password management, and using a separate app (not Keepass) for OTP/2FA, then you're fine. You're doing it right.

The slightly longer answer: some password management apps such as 1Password offer the ability to generate OTP codes as well as storing your passwords. If you do that you remove most or all of the added security you get by using OTP. Best practice is to use an app for password management, and have a separate app for OTP/2FA, which it sounds like you're doing. I used Authy as an example OTP/2FA app but there are many others of course.
User avatar
Gray
Posts: 788
Joined: Sat Apr 16, 2011 5:33 am
Location: Virginia

Re: Best secure email to use instead of gmail?

Post by Gray »

Gmail and Outlook can both be relatively secure, but you need to add all the other security configurations to truly protect yourself. This includes device-based MFA, location monitoring (to prevent impossible logins—force validation), generation of one time passwords to keep in your safe if you are ever locked out.

I don’t integrate my email with social networking features offered by email providers. I pay for premium email services if offered, and use security integrations.
inbox788
Posts: 7617
Joined: Thu Mar 15, 2012 5:24 pm

Re: Best secure email to use instead of gmail?

Post by inbox788 »

I’ve been updating beneficiary info for my accounts to make sure POD and TOD are appropriate. So far, only Gmail and Outlook have Inactive Account Management settings that I could find. This is becoming an important just in case feature for me. Are there other email providers with this ability? I’m thinking of using a separate new email just for this purpose. I think either is adequately secure, though I plan additional security such as 2 factor authorization at the account logins.
User avatar
Ged
Posts: 3923
Joined: Mon May 13, 2013 1:48 pm
Location: Roke

Re: Best secure email to use instead of gmail?

Post by Ged »

JoMoney wrote: Fri Aug 16, 2019 8:09 am I would vote Protonmail for anyone who doesn't want to setup their own mail server and encryption (and is concerned about security)
Because of my IT experience I opted to set up my own email server. It has been an interesting journey. It offers some unique advantages but also some unique problems.
t3xn
Posts: 15
Joined: Tue Mar 03, 2015 1:15 pm

Re: Best secure email to use instead of gmail?

Post by t3xn »

You can buy your own domain for around $10 a year and host with a provider like namecheap.com. I've been hosting my own for 20 years back when hotmail/aol/yahoo were the only email hosts. My most recent renewal was $106 for 3 years.
User avatar
ariyan
Posts: 3
Joined: Mon Nov 04, 2019 10:03 am
Location: Denmark

Re: Best secure email to use instead of gmail?

Post by ariyan »

I use ProtonMail, but I found this link with other suggestions, which might help: https://www.lifewire.com/best-secure-em ... es-4136763
cbeck
Posts: 290
Joined: Sun Jun 24, 2012 1:28 am

Re: Best secure email to use instead of gmail?

Post by cbeck »

ARoseByAnyOtherName wrote: Sun Nov 03, 2019 4:03 pm
RubyTuesday wrote: Sun Nov 03, 2019 9:04 am
ARoseByAnyOtherName wrote: Fri Aug 16, 2019 9:27 pm - set up two factor authentication on all sites that allow it. Despite the temptation do NOT use your password manager as a 2FA/OTP app also. Use a dedicated third party app such as Authy.
Thanks for the great list... I’m In the process of setting all of this up.

Question about the quoted bullet above... not sure what this means. Could you elaborate? FWIW, I use a keepass (locked with long random string) and drop box as my password management approach, but keepass isn’t used as a 2fa or OTP app. Not sure what you’re suggesting I need authy for assuming I’ve setup Yubikey 2fa for Gmail/google voice etc.
Glad you find it helpful!

Regarding the quote, the short answer is if you're using Keepass for password management, and using a separate app (not Keepass) for OTP/2FA, then you're fine. You're doing it right.

The slightly longer answer: some password management apps such as 1Password offer the ability to generate OTP codes as well as storing your passwords. If you do that you remove most or all of the added security you get by using OTP. Best practice is to use an app for password management, and have a separate app for OTP/2FA, which it sounds like you're doing. I used Authy as an example OTP/2FA app but there are many others of course.
Not true actually. Using the 1Password software token prevents access to a bank account, say, if my password for that bank account were compromised. I would only lose all protection if my 1Password master password itself were compromised.

Moreover, since my 1Password account is accessible from any of my devices, if I were using the 1Password OTP feature and lost my cell phone I could still get to my financial accounts using 1Password on my laptop. However, if I were to use a separate software token app on my cell phone and then lost the cellphone, how would I get access to the bank account?
User avatar
whodidntante
Posts: 9137
Joined: Thu Jan 21, 2016 11:11 pm
Location: outside the echo chamber

Re: Best secure email to use instead of gmail?

Post by whodidntante »

t3xn wrote: Mon Nov 04, 2019 12:31 am You can buy your own domain for around $10 a year and host with a provider like namecheap.com. I've been hosting my own for 20 years back when hotmail/aol/yahoo were the only email hosts. My most recent renewal was $106 for 3 years.
$106 divided by three is not $10. :happy
t3xn
Posts: 15
Joined: Tue Mar 03, 2015 1:15 pm

Re: Best secure email to use instead of gmail?

Post by t3xn »

whodidntante wrote: Sat Nov 09, 2019 1:41 am
$106 divided by three is not $10. :happy
the domain name is $10, the hosting cost is around $30-$40 a year..
ARoseByAnyOtherName
Posts: 1000
Joined: Wed Apr 26, 2017 12:03 am

Re: Best secure email to use instead of gmail?

Post by ARoseByAnyOtherName »

cbeck wrote: Sat Nov 09, 2019 12:31 am
ARoseByAnyOtherName wrote: Sun Nov 03, 2019 4:03 pm
RubyTuesday wrote: Sun Nov 03, 2019 9:04 am
ARoseByAnyOtherName wrote: Fri Aug 16, 2019 9:27 pm - set up two factor authentication on all sites that allow it. Despite the temptation do NOT use your password manager as a 2FA/OTP app also. Use a dedicated third party app such as Authy.
Thanks for the great list... I’m In the process of setting all of this up.

Question about the quoted bullet above... not sure what this means. Could you elaborate? FWIW, I use a keepass (locked with long random string) and drop box as my password management approach, but keepass isn’t used as a 2fa or OTP app. Not sure what you’re suggesting I need authy for assuming I’ve setup Yubikey 2fa for Gmail/google voice etc.
Glad you find it helpful!

Regarding the quote, the short answer is if you're using Keepass for password management, and using a separate app (not Keepass) for OTP/2FA, then you're fine. You're doing it right.

The slightly longer answer: some password management apps such as 1Password offer the ability to generate OTP codes as well as storing your passwords. If you do that you remove most or all of the added security you get by using OTP. Best practice is to use an app for password management, and have a separate app for OTP/2FA, which it sounds like you're doing. I used Authy as an example OTP/2FA app but there are many others of course.
Not true actually.
What part of what I wrote is not true? Be specific.
cbeck wrote: Sat Nov 09, 2019 12:31 am Using the 1Password software token prevents access to a bank account, say, if my password for that bank account were compromised.
If the bank account password was compromised you can't trust your OTP code either. Storing them together in 1Password does not help in this scenario.
cbeck wrote: Sat Nov 09, 2019 12:31 am I would only lose all protection if my 1Password master password itself were compromised.
Yes, and this is the scenario that is protected against when you have your 2FA codes generated by a separate app.
cbeck wrote: Sat Nov 09, 2019 12:31 am Moreover, since my 1Password account is accessible from any of my devices, if I were using the 1Password OTP feature and lost my cell phone I could still get to my financial accounts using 1Password on my laptop. However, if I were to use a separate software token app on my cell phone and then lost the cellphone, how would I get access to the bank account?
You would either restore your 2FA codes to a new device if the app you're using allows secure, encrypted backups, as Authy and I believe others do. Or you would get access via recovery codes or whatever restore process your bank provides.
Workable Goblin
Posts: 100
Joined: Fri Mar 01, 2019 8:37 pm
Location: Honolulu, HI

Re: Best secure email to use instead of gmail?

Post by Workable Goblin »

ARoseByAnyOtherName wrote: Sat Nov 09, 2019 1:12 pm If the bank account password was compromised you can't trust your OTP code either. Storing them together in 1Password does not help in this scenario.
It depends on how the bank account password was compromised. If it was compromised because, say, the bank stored it in plaintext or a weak hash, then the OTP in 1Password still prevents it from being useful (at least in theory--although if the bank screwed up so badly with passwords, I wouldn't rate their 2FA process). If it was compromised because they managed to get in the middle and capture the password and OTP as they were passed, then storing them together neither helped nor hurt. If it was compromised because the attackers cracked your master password, then the OTP in 1Password is useless, yes.

What this proves is that you should have a very strong master password, which should reduce the risk of the final attack to almost zero relative to the other two possibilities. I recommend a long (6-7 word minimum) diceware passphrase. That should be functionally uncrackable unless 1Password really screwed something up, while being relatively easy to remember.
cbeck wrote: Sat Nov 09, 2019 12:31 am Yes, and this is the scenario that is protected against when you have your 2FA codes generated by a separate app.
Of course, depending on your threat model and the strength of the master password you may not consider this a particularly serious danger.

(In fact I do use a separate authenticator app in addition to 1Password, which I have secured with a strong diceware passphrase)
jumbopapa
Posts: 104
Joined: Thu Aug 30, 2018 7:56 am

Re: Best secure email to use instead of gmail?

Post by jumbopapa »

I am using Fastmail and it works perfectly. They are committed to not selling my information, so there is much more peace of mind than when using Google services. It additionally includes calendar, file storage, and notes. All of this has been great because it has further decoupled me from Google. I also get to use my own domain which is nice because it makes your email very portable. If Fastmail does something I don't like, well then I can just change what email provider I have configured on my domain and no sites that use my email address even know/care that it changed.

Side note: I use DuckDuckGo for all searches now. I even wrote a little script that replaces the Google search bar on Bogleheads to a DuckDuckGo one! I plan on packaging that up and allowing other users to use it soon. :happy
ARoseByAnyOtherName
Posts: 1000
Joined: Wed Apr 26, 2017 12:03 am

Re: Best secure email to use instead of gmail?

Post by ARoseByAnyOtherName »

Workable Goblin wrote: Sat Nov 09, 2019 4:16 pm
ARoseByAnyOtherName wrote: Sat Nov 09, 2019 1:12 pm If the bank account password was compromised you can't trust your OTP code either. Storing them together in 1Password does not help in this scenario.
It depends on how the bank account password was compromised. If it was compromised because, say, the bank stored it in plaintext or a weak hash, then the OTP in 1Password still prevents it from being useful (at least in theory--although if the bank screwed up so badly with passwords, I wouldn't rate their 2FA process).
The way TOTP works is that a secret key is stored on the server (and the client app), and that secret key is used to generate the 2FA code at a particular point in time. (See https://en.wikipedia.org/wiki/Time-base ... _algorithm for more info).

If your bank password was compromised due to a breach at the bank then you must assume that the OTP secret key was compromised as well.

I 100% stand behind the statement I made above: "Some password management apps such as 1Password offer the ability to generate OTP codes as well as storing your passwords. If you do that you remove most or all of the added security you get by using OTP. "

1Password offers OTP functionality as a convenience. Which is fine, but there's no way to argue that's a best practice... as it seems you know since you're using a separate app :sharebeer
ARoseByAnyOtherName
Posts: 1000
Joined: Wed Apr 26, 2017 12:03 am

Re: Best secure email to use instead of gmail?

Post by ARoseByAnyOtherName »

jumbopapa wrote: Sat Nov 09, 2019 6:15 pm I am using Fastmail and it works perfectly. They are committed to not selling my information, so there is much more peace of mind than when using Google services. It additionally includes calendar, file storage, and notes. All of this has been great because it has further decoupled me from Google. I also get to use my own domain which is nice because it makes your email very portable. If Fastmail does something I don't like, well then I can just change what email provider I have configured on my domain and no sites that use my email address even know/care that it changed.
I also use Fastmail with my own domain for my email and am extremely happy with this setup. Been doing this for maybe 5 years or so. Highly recommended if you're interested in a Gmail alternative.
cbeck
Posts: 290
Joined: Sun Jun 24, 2012 1:28 am

Re: Best secure email to use instead of gmail?

Post by cbeck »

Workable Goblin wrote: Sat Nov 09, 2019 4:16 pm
ARoseByAnyOtherName wrote: Sat Nov 09, 2019 1:12 pm If the bank account password was compromised you can't trust your OTP code either. Storing them together in 1Password does not help in this scenario.
It depends on how the bank account password was compromised. If it was compromised because, say, the bank stored it in plaintext or a weak hash, then the OTP in 1Password still prevents it from being useful (at least in theory--although if the bank screwed up so badly with passwords, I wouldn't rate their 2FA process). If it was compromised because they managed to get in the middle and capture the password and OTP as they were passed, then storing them together neither helped nor hurt. If it was compromised because the attackers cracked your master password, then the OTP in 1Password is useless, yes.

What this proves is that you should have a very strong master password, which should reduce the risk of the final attack to almost zero relative to the other two possibilities. I recommend a long (6-7 word minimum) diceware passphrase. That should be functionally uncrackable unless 1Password really screwed something up, while being relatively easy to remember.
Actually even if the 1Password master password is compromised the attacker cannot gain access to your 1Password store without the additional "secret key" that 1Password generated when you created your account and which is not transmitted. The secret key is stored on the user's devices though, so if the attacker had both the 1Password master password and the device, he could gain access.
User avatar
thatwhichisgood
Posts: 89
Joined: Fri Sep 19, 2008 9:55 pm
Location: Laid off 2007, RV 2007, Desert 2009, Back to Washington State 2017
Contact:

Re: Best secure email to use instead of gmail?

Post by thatwhichisgood »

I have used Gmail for a number of years. Up until about 2 years ago I would say it was secure too. I started getting emails in both French and German and once in awhile in English... they go to my first and last name at gmail.com with or without period between the first last name.

I have tried to send examples and discuss it with Google multiple times. I get no response. I have seen the Google help page that explains why all those emails really are me and what they do with punctuation.... Except it appears they are wrong. I get both some personal emails as well as many commercial ones. I also get notifications that someone's trying to reset the password from a wide variety of sites. Just recently I've gotten 3 emails from Google to verify I'm trying to get back into a my account which of course I reply no.

I haven't quit using it but I use it judiciously. I know I need to abandon it. If I get another Gmail account associated with a name I will use an additional number or arbitrary word. It's crazy to see. I have dozens and dozens of emails although I also deleted many, blocked some too. :annoyed.

I read something a long time ago as I recall...about a theory that there was a window of time where Google sign up authentication software failed on certain types of servers I think maybe internationally but I don't really quite remember.

That's my experience on Gmail and security.
mptfan
Posts: 6209
Joined: Mon Mar 05, 2007 9:58 am

Re: Best secure email to use instead of gmail?

Post by mptfan »

ARoseByAnyOtherName wrote: Fri Aug 16, 2019 9:27 pm
- Create a new Gmail account (with an email address not obviously associated with you).
- Enroll this account in the Google Advanced Protection Program. https://landing.google.com/advancedprotection/
- Using this account register a new Google Voice phone number.
- Use this new email address as the primary email/login for your financial and cellphone online accounts. Use your google voice number as the mobile phone contact for these accounts.
...
- for bonus points, your primary email account that you actually use to communicate with others should also be a gmail account that’s enrolled in the Advanced Protection Program.
My primary and only email account is a Gmail account enrolled in the Advanced Protection Program and I am considering creating a new Gmail account just for financial accounts, but I am wondering...if my primary Gmail account is already enrolled in the Advanced Protection Progam, is there a benefit to using a second Gmail account enrolled in the Advanced Protection Program? Isn't the point of the Advanced Protection Program that it prevents your Gmail from being phished or hacked and if so, doesn't that provide just as much protection for your primary Gmail account as you would get from setting up the Advanced Protection Program on a second Gmail acccount but without the extra hassle of keeping track of a second email account?

How do you manage the second email account, do you just have to log in and check it regularly? I can imagine a scenario where you don't check that second financial email for a period of time and you miss an important notification, whereas if the notification were sent to your primary email you would have seen it. It seems to me that the risk of missing important notifications would be greater than the risk of getting phished if your primary email is enrolled in the Advanced Protection Program. Am I wrong?
tibbitts
Posts: 11969
Joined: Tue Feb 27, 2007 6:50 pm

Re: Best secure email to use instead of gmail?

Post by tibbitts »

Ged wrote: Mon Nov 04, 2019 12:04 am
JoMoney wrote: Fri Aug 16, 2019 8:09 am I would vote Protonmail for anyone who doesn't want to setup their own mail server and encryption (and is concerned about security)
Because of my IT experience I opted to set up my own email server. It has been an interesting journey. It offers some unique advantages but also some unique problems.
Because of my IT experience, a good part of which was running mail servers, I hope someone would lock me in a padded room if I set up my own mail server.
jebmke
Posts: 11443
Joined: Thu Apr 05, 2007 2:44 pm
Location: Delmarva Peninsula

Re: Best secure email to use instead of gmail?

Post by jebmke »

mptfan wrote: Sat Jun 27, 2020 8:35 am How do you manage the second email account, do you just have to log in and check it regularly?
I have several GMail accounts. I use Thunderbird on my desktop and have multiple email accounts - several GMail, an old Yahoo account and my Outlook account which is mainly for One Drive and tracking MS licenses for a volunteer group I work with.

You can just log in from a browser as well.
When you discover that you are riding a dead horse, the best strategy is to dismount.
mptfan
Posts: 6209
Joined: Mon Mar 05, 2007 9:58 am

Re: Best secure email to use instead of gmail?

Post by mptfan »

jebmke wrote: Sat Jun 27, 2020 10:21 am I have several GMail accounts. I use Thunderbird on my desktop and have multiple email accounts - several GMail, an old Yahoo account and my Outlook account which is mainly for One Drive and tracking MS licenses for a volunteer group I work with.
Do you regularly check all of your email accounts? Do you have to login to each account everytime? Do you find that to be a hassle?
jebmke
Posts: 11443
Joined: Thu Apr 05, 2007 2:44 pm
Location: Delmarva Peninsula

Re: Best secure email to use instead of gmail?

Post by jebmke »

mptfan wrote: Sat Jun 27, 2020 10:40 am
jebmke wrote: Sat Jun 27, 2020 10:21 am I have several GMail accounts. I use Thunderbird on my desktop and have multiple email accounts - several GMail, an old Yahoo account and my Outlook account which is mainly for One Drive and tracking MS licenses for a volunteer group I work with.
Do you regularly check all of your email accounts? Do you have to login to each account everytime? Do you find that to be a hassle?
Thunderbird logs in automatically and checks email every 10 minutes or so.
When you discover that you are riding a dead horse, the best strategy is to dismount.
JBTX
Posts: 6988
Joined: Wed Jul 26, 2017 12:46 pm

Re: Best secure email to use instead of gmail?

Post by JBTX »

mptfan wrote: Sat Jun 27, 2020 10:40 am
jebmke wrote: Sat Jun 27, 2020 10:21 am I have several GMail accounts. I use Thunderbird on my desktop and have multiple email accounts - several GMail, an old Yahoo account and my Outlook account which is mainly for One Drive and tracking MS licenses for a volunteer group I work with.
Do you regularly check all of your email accounts? Do you have to login to each account everytime? Do you find that to be a hassle?
I have multiple email accounts and pull them into one common inbox in outlook on computer and I phones email app on iPhone.

I tend to prefer pop 3 which allows me to download emails onto desktop after a few weeks vs having them sit in email server forever.
HawkeyePierce
Posts: 1488
Joined: Tue Mar 05, 2019 10:29 pm
Location: Colorado

Re: Best secure email to use instead of gmail?

Post by HawkeyePierce »

thatwhichisgood wrote: Sun Nov 10, 2019 2:21 am I have used Gmail for a number of years. Up until about 2 years ago I would say it was secure too. I started getting emails in both French and German and once in awhile in English... they go to my first and last name at gmail.com with or without period between the first last name.

I have tried to send examples and discuss it with Google multiple times. I get no response. I have seen the Google help page that explains why all those emails really are me and what they do with punctuation.... Except it appears they are wrong. I get both some personal emails as well as many commercial ones. I also get notifications that someone's trying to reset the password from a wide variety of sites. Just recently I've gotten 3 emails from Google to verify I'm trying to get back into a my account which of course I reply no.

I haven't quit using it but I use it judiciously. I know I need to abandon it. If I get another Gmail account associated with a name I will use an additional number or arbitrary word. It's crazy to see. I have dozens and dozens of emails although I also deleted many, blocked some too. :annoyed.

I read something a long time ago as I recall...about a theory that there was a window of time where Google sign up authentication software failed on certain types of servers I think maybe internationally but I don't really quite remember.

That's my experience on Gmail and security.
I fail to understand what getting random emails has to do with Gmail's security.
av111
Posts: 105
Joined: Mon Jan 26, 2015 1:27 pm

Re: Best secure email to use instead of gmail?

Post by av111 »

What risks are we talking about specifically? And what is the % probability based on known examples that used Gmail as primary email

A. Someone taking over someone's identity completely for ever.
B. Someone gets an ability to make transactions in others accounts for a limited time
C. Someone locks up your computers using ransomware
D. Government looks into someone's accounts without warrant

Are there other specific risks that people are trying to guard against?

Out of these, I have personally had one bad experience (C) when someone used a hardware defect in a device to encrypt a NAS for ransom

Would the risk be lesser by moving away from Gmail. Or is it just that nothing bad happens to most people most of the time
AV111
User avatar
windaar
Posts: 419
Joined: Thu Mar 08, 2012 7:31 am

Re: Best secure email to use instead of gmail?

Post by windaar »

Look into fastmail.com for security and privacy.
Nobody knows nothing.
HawkeyePierce
Posts: 1488
Joined: Tue Mar 05, 2019 10:29 pm
Location: Colorado

Re: Best secure email to use instead of gmail?

Post by HawkeyePierce »

Before leaving Google for one of these more recent offerings touting improved privacy or security consider that:

1) Gmail's security team alone is likely bigger than the entire engineering team at any one of these companies.

2) Google's Advanced Account Protection offers the best protection against phishing available.

3) Google has the muscle to detect advanced threats, including from state actors, a capability few other companies can match.

4) Google does not scan your emails for ad targeting. Google ended this practice in 2017.

Moving to Protonmail or Fastmail or any of the others does not improve your security. I will steadfastly argue it weakens your security.

I worked in the email space for several years, including in partnership with Google. Nobody offers more secure email than Google today.
User avatar
Ged
Posts: 3923
Joined: Mon May 13, 2013 1:48 pm
Location: Roke

Re: Best secure email to use instead of gmail?

Post by Ged »

tibbitts wrote: Sat Jun 27, 2020 10:07 am
Ged wrote: Mon Nov 04, 2019 12:04 am
JoMoney wrote: Fri Aug 16, 2019 8:09 am I would vote Protonmail for anyone who doesn't want to setup their own mail server and encryption (and is concerned about security)
Because of my IT experience I opted to set up my own email server. It has been an interesting journey. It offers some unique advantages but also some unique problems.
Because of my IT experience, a good part of which was running mail servers, I hope someone would lock me in a padded room if I set up my own mail server.
:D
User avatar
Ged
Posts: 3923
Joined: Mon May 13, 2013 1:48 pm
Location: Roke

Re: Best secure email to use instead of gmail?

Post by Ged »

HawkeyePierce wrote: Sun Jun 28, 2020 12:00 am Before leaving Google for one of these more recent offerings touting improved privacy or security consider that:

4) Google does not scan your emails for ad targeting. Google ended this practice in 2017.
Unfortunately we don't have a way of verifying that Google isn't scanning our mail, for its own or other people's purposes.
HawkeyePierce
Posts: 1488
Joined: Tue Mar 05, 2019 10:29 pm
Location: Colorado

Re: Best secure email to use instead of gmail?

Post by HawkeyePierce »

Ged wrote: Sun Jun 28, 2020 6:44 pm
HawkeyePierce wrote: Sun Jun 28, 2020 12:00 am Before leaving Google for one of these more recent offerings touting improved privacy or security consider that:

4) Google does not scan your emails for ad targeting. Google ended this practice in 2017.
Unfortunately we don't have a way of verifying that Google isn't scanning our mail, for its own or other people's purposes.
That applies to all hosted email, unless you're doing client-side PGP encryption and expecting everyone you correspond with to do the same.

I don't think even Richard Stallman goes that far.
User avatar
Ged
Posts: 3923
Joined: Mon May 13, 2013 1:48 pm
Location: Roke

Re: Best secure email to use instead of gmail?

Post by Ged »

HawkeyePierce wrote: Sun Jun 28, 2020 9:50 pm
Ged wrote: Sun Jun 28, 2020 6:44 pm
HawkeyePierce wrote: Sun Jun 28, 2020 12:00 am Before leaving Google for one of these more recent offerings touting improved privacy or security consider that:

4) Google does not scan your emails for ad targeting. Google ended this practice in 2017.
Unfortunately we don't have a way of verifying that Google isn't scanning our mail, for its own or other people's purposes.
That applies to all hosted email, unless you're doing client-side PGP encryption and expecting everyone you correspond with to do the same.

I don't think even Richard Stallman goes that far.
When I worked certain sensitive projects for the Federal Government that is exactly what I did.
jaybee9
Posts: 135
Joined: Tue Mar 06, 2018 9:36 pm

Re: Best secure email to use instead of gmail?

Post by jaybee9 »

IMO the best site with actual data comparing different services:

https://thatoneprivacysite.net/email-comparison

It hasn't been updated since 2018 but still pretty useful. Based on it, I selected mailbox.org, it's been good.
percy
Posts: 79
Joined: Mon Jan 21, 2008 6:35 pm

Re: Best secure email to use instead of gmail?

Post by percy »

Here's a brand new one, I don't think it's been mentioned? From the guy who founded Basecamp project management app:

https://www.theverge.com/2020/6/15/2128 ... rms-launch


https://hey.com/
hdcd
Posts: 63
Joined: Tue Feb 26, 2013 4:09 pm

Re: Best secure email to use instead of gmail?

Post by hdcd »

I switched years back to hush.com and have been very happy. Don't get any spam (other than sites I subscribed to). Also have a proton account but don't use it. I'm sure proton is more secure but there comes a point.. also at the time I wanted email with my own domain which they didn't support at the time.
User avatar
Marmot
Posts: 396
Joined: Sun Oct 10, 2010 1:44 pm
Location: Phoenix, AZ

Re: Best secure email to use instead of gmail?

Post by Marmot »

If you have your own domain, how do you integrate an email (from that domain) into outlook? I know this sounds so basic, sorry for the question.
Marty....don't go to the year 2020....Dr. Emmett Brown
avidracer
Posts: 20
Joined: Fri Oct 20, 2017 10:06 am

Re: Best secure email to use instead of gmail?

Post by avidracer »

I think the OP intention was privacy and not Security - Google is competent with security aspects but show least concern for privacy.

Two good options have already been listed above: protonmail and tutanota. Both offer free tier to see if its something you might like at the end. :sharebeer
mptfan
Posts: 6209
Joined: Mon Mar 05, 2007 9:58 am

Re: Best secure email to use instead of gmail?

Post by mptfan »

avidracer wrote: Wed Jul 22, 2020 1:40 pm I think the OP intention was privacy and not Security - Google is competent with security aspects but show least concern for privacy.
I agree that security and privacy are distinct and they have been conflated in this discussion. I know that Google has world class cutting edge security technology for users of their services but I can't speak about their concern for your privacy.
sanjaymk
Posts: 17
Joined: Thu Oct 25, 2007 12:11 pm

Re: Best secure email to use instead of gmail?

Post by sanjaymk »

avidracer wrote: Wed Jul 22, 2020 1:40 pm Two good options have already been listed above: protonmail and tutanota. Both offer free tier to see if its something you might like at the end. :sharebeer
Would like to add one more - Hey email - https://hey.com. Built by guys who have strong opinions(bad) about all existing email providers in terms of privacy(spy pixel tracking) and security, so they built something that addresses these. Catch? - not free($99/year). Also, relatively new providers, so you might get an email with your name.

They have a page on security - https://hey.com/security/
User avatar
beernutz
Posts: 332
Joined: Sun May 31, 2015 12:50 pm

Re: Best secure email to use instead of gmail?

Post by beernutz »

RootSki wrote: Fri Aug 16, 2019 8:07 am I’m curious, do you send out a lot of sensitive or personal information via email?
Yes, they do.
Don't gamble; take all your savings and buy some good stock and hold it till it goes up, then sell it. If it don't go up, don't buy it. --Will Rogers
Post Reply