Your email account is one of the most important things to protect online. It's not just where your messages live — it's the key to almost every other account you have. If someone gains access to your email, they can reset your passwords and take over your bank, social media and shopping accounts.
Here's how to make sure your email is properly protected.
1. Use a strong, unique password
Your email password should be long (at least 12 characters), random, and not used anywhere else. If you're using the same password for multiple accounts, changing your email password is the single most important thing you can do today.
A password manager like Bitwarden (free) or 1Password makes it easy to use strong, unique passwords without having to remember them all.
2. Turn on two-factor authentication
Two-factor authentication (2FA) means that even if someone knows your password, they still can't get into your account without a second verification — usually a code sent to your phone or generated by an app.
Almost every email provider supports 2FA. In Gmail, go to your Google Account settings and look for "2-Step Verification". In Outlook, go to your Microsoft Account security settings. Turn it on — it takes about five minutes and makes your account dramatically more secure.
3. Watch out for phishing emails
Phishing emails are messages designed to look like they're from a trusted organisation — your bank, HMRC, Royal Mail or a well-known retailer — that try to trick you into clicking a link or entering your details.
Warning signs include unexpected emails asking you to act urgently, links that don't match the sender's real website, and requests for passwords or payment details. If in doubt, go directly to the organisation's website rather than clicking any link in the email.
4. Check if your email has been in a data breach
Visit haveibeenpwned.com and enter your email address. This free service tells you if your email and password have appeared in any known data breaches. If they have, change your password immediately.
5. Review which apps have access to your email
Over time, many apps and websites accumulate permission to access your email account. In your Gmail or Outlook settings, look for "Third-party apps" or "Connected apps" and revoke access for anything you no longer use or recognise.
Need help securing your accounts?
I offer an Account Recovery Assistance service for people who've been locked out, and a Home Online Safety Setup session to put proper protections in place across all your accounts. The Bytova Home Support Plan also gives you ongoing support whenever a security concern comes up.