Hackers hate these 5 email settings — so turn them on right now

Hackers hate these 5 email settings — so turn them on right now


For a long time, I thought my provider handled email protection, and I didn’t put as much effort into locking down my accounts as I should have. The truth is that not actively protecting your email can leave an open door that’s too tempting for hackers to resist; you’re a tasty target, given all the data hoarded in your emails.

Thankfully, switching on just a handful of settings found in pretty much every email program these days makes you a much more difficult prospect to take down, so much so that most drive-by hackers will quickly move to the next target. And best of all? These additional email security settings are free and only take a minute or two to configure, which makes them even more worth your time.

A hand holding a smartphone with a security shield and a password.

Related

Install These 5 Security Apps Now to Protect Your Data

The internet is a dangerous place, but you can make it safer with these security apps.

2FA via an authenticator app

Simple to set up, massively increases your protection

One of the easiest ways to reduce the risk of your email being hacked is to enable two-factor authentication (2FA). Even if a hacker guesses your password, they’ll still need to verify their identity in another way they probably won’t have access to. It’s one of the best forms of multi-factor authentication (MFA).

You can turn on 2FA in many ways, but I recommend using an authenticator app. For example, I use Google Authenticator. Many password manager tools have their own version, and the differences between them are few and far between.

Once you’ve enabled 2FA via an authenticator app, you’ll typically see an ever-changing code you’ll need to enter when prompted. In some cases, you can scan a QR code instead.

If you’re like me, you’ve given countless tools access over the years

Third party app section
Screenshot by Author Sandra Dindi

Signing into accounts with your email address is often easier than setting up a separate profile and creating a new password. But while it’s helpful to log into services you use often, giving third-party tools access to your email can put you at risk.

While many tools you use with your email have robust security infrastructure, that isn’t true for all of them. Be especially careful when signing up for new tools that haven’t been tested over extended periods. If the app or service later becomes obsolete and no longer receives updates, hackers could expose this flaw.

Only keep access to the third-party tools you use frequently. You can go to your email account’s settings and remove access for apps you no longer want; make a habit of doing this at least once every few weeks. Take the same precautions when signing in with your social logins, too.

Use your email’s external image-loading blocker

Manually enable them when you know it’s safe

The External Image Loading feature in Outlook
Screenshot by Danny Maiorca from the Outlook web app

While normally fine, external images can sometimes present a security threat and a hacking loophole. For example, cybercriminals might inject code or add tracking pixels to the spam mail they send. Unless you 100% trust the sender (or it’s evidently from a verified company account), you should tread carefully when accessing external images in your email.

Using your email client’s image loader can reduce hacking risk by keeping your data safe. For example, Outlook has a feature that lets you do exactly this.

  1. Go to Settings > Privacy and data > External images.
  2. Tick the circle next to Always use the Outlook service to load images.

Not using this tool is one of the many email security mistakes you can make. If your email client doesn’t have this feature, you may want to consider switching to a different service, but most modern email clients include it.

Strict incoming email handling

It’s time to whitelist

Enabling strict settings in the Outlook app
Screenshot by Danny Maiorca from the Outlook web app

Your email account is, unfortunately, the starting point for many scams. You’re likely to receive more scam and phishing emails than real correspondence, so your email account and service need a strong spam filter. While many email clients are good at filtering out spam and phishing emails, they won’t catch everything, and you shouldn’t trust them to do so, either.

Instead, use them as an initial filter, then take matters into your own hands. Most email clients let you choose who can send you emails, using a whitelist approach.

Since you have full control over who can send you emails, you’re less likely to fall victim to hacking. Moreover, you’ll protect yourself from other email security threats, such as phishing.

Blocking attachments

Use this with a whitelisting function

thunderbird email client blocking spam options.

While blocking external images will help reduce your chances of getting hacked, you may want to take things a step further and block attachments from senders you don’t trust. With some tools, you can block anyone who isn’t on your safelist from sending you images, documents, and other content that could pose a security threat.

Besides adding safe senders, you can allow attachments from people in your contacts or on your list of trusted domains. Moreover, you have the option to add safe mailing lists. You don’t need all of these features enabled, but having at least one of them switched on is a good idea.

Passwords and passkeys

Passkeys are the next level of email protection

Loggin into Microsoft with Passkey
Afam Onyimadu / MUO

Even with every form of online authentication, having strong passwords is still one of the best ways to prevent your email account from being hacked. These days, it’s easier than ever; password-generation apps, such as Apple Passwords, will create a hard-to-guess password for you in less than a minute.

All of your email account passwords should be original. Even if your password is hard to guess on one account, it shouldn’t be reused. If your data is ever compromised, you’ll needlessly increase the threat of hacking against multiple accounts.

You can also switch to passkeys, which — besides protecting you from hackers — can also act as a phishing-resistant password alternative.

Protecting your email account from hackers doesn’t need to be strenuous. With a few simple steps, you can keep your information safe and keep the benefits of email while reducing the downsides. Adding multiple layers of security further reduces the chances of something bad happening.

woman answering smartphone call with scam alert

Related

These Are the Accounts Most Targeted By Hackers: Here’s How to Secure Them

Don’t let your most important accounts fall victim to hackers.



Content Curated Originally From Here