Email Protection

6 Best Email Security Tools + Protection Services

Email system security should be your business top priority. Email is the number one point for hackers to access your valuable business data, email attacks like business email compromise and phishing are on the rise. Your first defense plan should be an Email Protection Software, a platform that protects your emails against hackers and viruses. …

Jul 7, 2020 — By Skirmantas Venckus

Email system security should be your business top priority. Email is the number one point for hackers to access your valuable business data, email attacks like business email compromise and phishing are on the rise.

Your first defense plan should be an Email Protection Software, a platform that protects your emails against hackers and viruses.

Detecting threats to emails requires more than just having a spam-blocking system. Threat vectors are launched from particular angles at once, and hackers have developed packages of malware, each performing a functional task to provide towards the corruption of your email system.

Emails are a vital source of data, and they can be used by malware to send out stolen data. Blocking attacks against you requires multiple email protection strategies. It can seem like a complicated task, and very few email protection services on the market can satisfactorily fulfill all requirements.

According to Disk Drill Data Recovery, many large companies, annually lose a lot of data due to the fault of developers or specialists themselves, there is a data leak as well as unplanned removal for technical reasons.

Luckily, there are several great email protection systems out there, and we reviewed all of them. Companies are not identical, and with various email options and the requirements to protect an email can’t have in a one-size-fits-all strategy. We crafted a list of email protection solutions that will help you to protect your business according to your needs.

ProtonMail

Send password-protected, encrypted messages to anyone.

Import CSV contact lists.

Can’t change the default signature on free accounts.

ProtonMail is a free, open-source, encrypted email provider based in Switzerland. It works from any computer through the website and also through the Android and iOS mobile apps.

The most important feature when talking about any encrypted email service is whether or not other people can get a hold of your messages, and the answer is a solid no when it comes to ProtonMail since it features end-to-end encryption.

Nobody can decrypt encrypted ProtonMail messages without your unique password, including employees at ProtonMail, their ISP, your ISP, or the government.

ProtonMail is so secure that it can’t recover your emails if you forget your password. The decryption happens when you log on, so the service doesn’t have a means of decrypting emails without your password or a recovery account on file.

ProtonMail also doesn’t keep your IP address information. With a no-log email service like ProtonMail, emails can’t be traced back to you.

Additional helpful features include:

• Compose messages with images and rich text formatting.
• Keyboard shortcuts.
• Download PGP keys.

The free version of ProtonMail supports 500 MB of email storage and limits usage to 150 messages per day.

Pay for the Plus or Visionary service for more space, email aliases, priority support, labels, custom filtering options, auto-reply, built-in VPN protection, and the ability to send more emails each day. A Professional plan is also available for organizations.

Best VPN Services for Privacy Minded Linux Users

A handpicked list of VPN services that provide Linux support to protect your privacy.

10. POSTEO

• Open Source
• Runs on green energy
• Paid only (no trials)
• OpenPGP Encryption support
• Does not support custom domain

Posteo.de is an interesting email service that focuses on privacy and security while also running on green energy.

It is an affordable solution – for just 1 Euro/month (billed annually). However, they do not support adding a custom domain – even if you want to pay more. Fortunately, you do get email aliases. You can upgrade the storage space along with email aliases, and calendars.

A Note About End-to-End Encryption (E2EE)

As an update to this article, we found quite a few people being skeptical about some of the email services which are end-to-end encrypted.

Well, to clear things up right off the bat, by default, the emails you send are not “end-to-end” encrypted but secure.

When we mention end-to-end encrypted – it means, only the receiver can decrypt (or access) the message. You can learn more about it on ProtonMail’s blog post – What is end-to-end encryption?).

So, when utilizing these secure email services – generate your keypair, import the public key of your recipient and remember to enable encryption while you compose the email.

For additional reference, you can read about how Mailfence enforces end-to-end encryption.

Wrapping Up

A few readers mentioned Lavabit. I didn’t really find it interesting but do have a look at it and judge it yourself.

You may have to face some inconvenience when using a privacy-focused email service, such as – mediocre UI and some personalization features. However, that’s a trade-off that you have to bear with if you want to prioritize your privacy over anything else.

Did we miss any of your favorites? Do you hate one of the secure email services mentioned above? Feel free to let us what you think in the comments below.

Like what you read? Please share it with others.

A single malicious email can wreak havoc on organizations. Watch the most recent email schemes from shocking reveals to COVID-19 related phishing attacks

Phishing emails become more sophisticated by the day and can be the start of lateral attacks across organizations, leading to huge losses.

CloudGuard SaaS detects and blocks the most advanced phishing attacks across inbound and internal communications in real time – before they reach users.

CloudGuard SaaS leverages Check Point SandBlast Threat Emulation and Threat Extraction technologies to deliver clean files to users within 1.5 seconds, with the industry’s best catch rate, recognized by the NSS Labs as ‘most effective in breach prevention’.

CloudGuard SaaS prevents account takeovers attacks even when credentials are stolen:

• Access control with pre-defined login conditions
• Agent and agentless multi-factor authentication

Leveraging threat intelligence from millions of Check Point secured end points and gateways across the globe, CloudGuard SaaS identifies malicious user activities and blocks unauthorized user access.

Protect sensitive business data and maintain regulatory compliance with advanced data leak prevention (DLP), using hundreds of pre-defined and custom data types to set policies tailored to your organization

A single malicious email can wreak havoc on organizations. Watch the most recent email schemes from shocking reveals to COVID-19 related phishing attacks

Phishing emails become more sophisticated by the day and can be the start of lateral attacks across organizations, leading to huge losses.

CloudGuard SaaS detects and blocks the most advanced phishing attacks across inbound and internal communications in real time – before they reach users.

CloudGuard SaaS leverages Check Point SandBlast Threat Emulation and Threat Extraction technologies to deliver clean files to users within 1.5 seconds, with the industry’s best catch rate, recognized by the NSS Labs as ‘most effective in breach prevention’.

CloudGuard SaaS prevents account takeovers attacks even when credentials are stolen:

• Access control with pre-defined login conditions
• Agent and agentless multi-factor authentication

Leveraging threat intelligence from millions of Check Point secured end points and gateways across the globe, CloudGuard SaaS identifies malicious user activities and blocks unauthorized user access.

Protect sensitive business data and maintain regulatory compliance with advanced data leak prevention (DLP), using hundreds of pre-defined and custom data types to set policies tailored to your organization

Email Protection

Email spoofing is the sending of email messages with a forged “from” address. Using a spoofed email address is common tactic email scammers use to gain the trust of their victims. You need to make sure the emails your website and organization sends are marked as authentic.

Risks

Over 95% of email sent over the internet consists of unwanted email: “spam”. Most spam uses spoofed addresses. If your domains are being used in spam messages, spammers may be taking advantage of your users to:

• Steal their credentials by sending “phishing” messages.
• Trick them into falling for online scams by abusing the trust they have in your site.
• Spread malware by sharing malicious attachments.

Protection

As a website owner you should prevent your domains being used in spam mail by adopting both of the following approaches:

• Implement the Sender Policy Framework (SPF): publish a DNS record to explicitly state which servers are allowed to send email from your domain.
• Implement Domain Key Identified Mail (DKIM): use a digital signature to prove that outgoing email was legitimately sent from you domain, and that it wasn’t modified in transit.

There is also an emerging umbrella standard called DMARC (“Domain-based Message Authentication, Reporting & Conformance”) that you should be aware of. Read more about DMARC here.

Adopting these technologies also has the benefit that the emails you send are less likely to be marked as spam.

Configuration

Implementing SPF and DKIM requires publishing new DNS records and making configuration changes to your technology stack — consult the documentation for your email sending service or software for details. Here are the relevant documentation links for some of the more common methods of sending email.

Transactional Email Services

Transaction emails are sent programmatically in response to actions on a website or application. If your site makes use of transactional email (during sign-ups or password resets, for example) you need to ensure you are sending authenticated mails. Here’s how to set up authenticated emails in the leading transactional email services.

Email Marketing Services

Email marketing services allow bulk-sending of emails to targeted mailing lists. If your sales and marketing staff make use of this kind of service, you need to ensure they are sending authenticated mails.

Mail Transfer Agents

If you organization hosts its own email servers, your system administrators will be making use of “Mail Transfer Agent” software. The most common MTAs are Microsoft Exchange (on Windows) and SendMail/Postfix (on Linux). Here’s how to implement authenticated email on those platforms:

Что означает эта рассылка?

Итак, изначально давайте сделаем перевод на русский язык текста, которое содержится в присланном письме:

Google can use this email address to make sure it’s really you if you get locked out of your account or if we notice suspicious activity.

Confirm your recovery email and see other personalized security recommendations in the Security Checkup.

Означает эта надпись следующее:

Google может использовать этот адрес электронной почты, чтобы убедиться, что это действительно Вы, если вы заблокированы из своей учетной записи или если мы заметили подозрительную активность.

Подтвердите сообщение электронной почты для восстановления и ознакомьтесь с другими персональными рекомендациями по безопасности в разделе Проверка безопасности.

В самой же папке письма размещен следующий текст: «Help us protect you: Security advice from Google». Или – Помогите нам защитить вас: советы по безопасности от Google.

Итак, что это означает? Компания Гугл решила обеспечить дополнительную безопасность своих пользователей и предлагает ознакомиться с дополнительной информацией по этому поводу. То есть, рассказать о том, как можно дополнительно защитить свой аккаунт.

Enterprise-class email protection without the enterprise price

For flexible per-user pricing, PhishProtection’s integrated email security solution protects your employees from business email compromise (BEC) and many other email threats. 24×7. On any device. With features you’d expect in more expensive solutions:

All Plans Come With

• Stops business email compromise (BEC)
• Stops brand forgery emails
• Stop threatening emails before they reach the inbox
• Continuous link checking
• Real-time website scanning
• Real time alerts to users and administrators
• Protection with settings you control
• Protection against zero day vulnerabilities
• Complete situational awareness from web-based console