Sending an email is convenient and quick, but when it comes to confidential data, you’re better off choosing another method of delivery, one that doesn't have as many potential points of access for an ill-intentioned actor.
Think about the path an email travels:
- First, you write it on your PC, laptop, tablet, or phone. This stores the information in your email program. A hacker who has accessed your device using malware could read it.
- The email then goes out to your email server. If that server is hacked, your data is at risk.
- Your message then travels through online networks to reach your recipient, but there’s no guarantee those networks are secure, especially not if you are crafting and sending that email from a public network in an airport or at a coffee shop.
- The email then hits the recipient’s email server, then their email program, and then their device. But the same risks that arose at your end are replicated on their side of the exchange, too.
Basically, when you send an email you lose control of the security of that communication, and potential problems abound:
- Hackers could be intercepting and reading your email.
- You can’t be certain that your recipient’s server or storage is encrypted at all times.
- A bad actor could impersonate a server to intercept messages, and you wouldn't know any better.
- Your recipients may save that email in their mailbox for months or even years. Down the road, if they are compromised, your email is vulnerable.
- Recipients can inadvertently forward that email on to unexpected parties.
- You can’t assign permissions or password protect that email.
The Solution to Email Insecurity
Stop sending sensitive information via email. Instead, select a method that allows you to check and control who has access to that data. This could mean uploading the information to a private portal or sending using an encrypted file-sharing service such as Google Drive or Dropbox. There are also encrypted messengers such as Signal, Wire, and Wickr Me, which offer end-to-end encryption and autodelete data to cut the risk of email exposure.
If the recipient needs a username and password, send the two credentials separately. You might text them the password, mail it, or call and give it to the individual directly. When using a system that sends a password email to the user, contact that individual direclty. Ensure that they receive the email, log in, and change the password to something else.
A virtual private network (VPN) is another good tool for securing email. A VPN is like an online tunnel that keeps your email traffic safe. The message sent or received is encrypted from the rest of the internet. In fact, the VPN masks your internet protocol (IP) address, too, meaning you are also protecting your original location.
Sending information online is a tricky business. Don’t put your sensitive information at risk by relying on email communications. Instead, use the solutions above to protect your private and proprietary data.
A managed service provider can set up the solutions you need. Contact us today at 937-660-4899 to protect your conversations online.
