Posts

Protect Domains That Don’t Send Email from Email Spoofing

We recently wrote an article for those who manage their own Internet domain names about using SPF, DKIM, and DMARC to prevent your domains from being used in phishing attacks and enhance the deliverability of legitimate email. But what about other domains you own but don’t use for email? To make phishing attacks more believable, spammers sometimes forge email so it appears to come from parked domains that aren’t protected. You can use SPF, DKIM, and DMARC to ensure that forged email that seems to come from your unused domains isn’t accepted. The details are too specific to go into here, but Cloudflare has an excellent article outlining what you need to do.

(Featured image based on an original by iStock.com/Igor Kutyaev)


Social Media: If you have parked domains that never send email, it’s important to set up SPF, DKIM, and DMARC so scammers can’t forge legitimate-looking email from those domains.

Find Some Ham Amidst Your Email Spam

Spam filters work pretty well—99% of the messages in your spam mailbox are probably spam. But it’s frustrating to miss an important message that was caught by an overeager spam filter. Here’s an easy way to find many good messages, also known as “ham,” amidst all the spam. Think of keywords that might appear in legitimate email to you: the name of your city, major employers in your area, nearby colleges, companies whose products you use, their products, and so on. Then search for those terms inside your spam mailbox, either one at a time or, if your email app supports it, as a single search with OR statements for each keyword, like this Gmail search (use your actual town name and so forth): in:spam townName OR employerName OR clubName OR companyName. Of course, your keywords will appear in some spam messages, but if the searches reveal ham messages you would otherwise have missed, they’re worthwhile. Be extra cautious around any message that wants you to click a link, log in, or provide private information. The fact that your spam filter caught a message is a red flag.

(Featured image by iStock.com/Igor Kutyaev)


Social Media: Rather than frequently skimming your entire spam mailbox for incorrectly captured messages, try searching for specific keywords that are likely to appear in legitimate email.

If Mail Fails to Send, Try, Try Again (Instead of Changing Servers)

Sometimes, something goes wrong, causing Mail on the Mac to have trouble sending a message. When it does, you may see an error like the one below, encouraging you with a default button to try another configured server. Don’t do it! Always click Try Later. If that still doesn’t work, contact your favorite tech support professional to troubleshoot the problem with the SMTP server associated with the account from which you’re sending. Attempting to send through another SMTP server is a recipe for trouble because various anti-spam checks may fail, causing your message to be filtered as spam or bounced back to you. Worse, if you select a different server and click Try With Selected Server, Mail remembers that choice going forward, so you will have to reset it manually later.

(Featured image by iStock.com/Marut Khobtakhob)


Social Media: If Mail on your Mac throws an error about being unable to send a message, always have it try again later rather than switching to a different server. Otherwise, your messages may look like spam and be blocked.

Pay Attention to Unsolicited Facebook Password Reset Messages

We’ve seen an uptick in attacks on Facebook accounts that generate email messages like the one below. It’s saying someone is attempting to reset your Facebook password in order to access your account. If you didn’t ask to reset your Facebook password within the past 5 minutes, do not enter the provided code! In fact, do nothing with a message like this, since you can’t easily tell if it’s a legitimate message from Facebook or a phishing attack. As long as your email account hasn’t been compromised, you have nothing to worry about, but consider any such messages as encouragement to have strong, unique passwords for your email account and any social media services. Also, we highly recommend turning on two-factor authentication for these accounts. Of course, if you get a second message saying that your password was reset, immediately secure your account.

(Featured image by iStock.com/Nicholas77)


Social Media: If you receive unexpected password reset email messages from Facebook, don’t worry—but don’t click anything! Use them as encouragement to ensure your email and social media passwords are strong, unique, and protected with two-factor authentication.

When Asking about Phishing Email, Make Sure to Write Separately Too

Sadly, email is not an entirely reliable communications medium, thanks to spam filters, addressing errors, and server failures. With certain types of email, it’s worth double-checking that a message was seen. One example of that we see is with reports of phishing email, which miscreants use to try to trick you into revealing passwords, credit card info, or other sensitive information. Phishing messages can be tricky to identify—that’s their goal. If you’re forwarding a possible phishing email to us or another trusted technical contact for evaluation, remember that spam filters often catch such messages, so they may go unseen. To work around this awkwardness, send a separate message saying you’ve forwarded what you think might be a phishing message so the recipient knows to check their Junk mailbox if need be. It’s helpful if you can include the Subject line of the suspect message.

(Featured image by Mikhail Nilov from Pexels)

Choose Your Preferred Default Web Browser and Email App in iOS and iPadOS 14

Since the earliest days of the iPhone, Apple’s Safari and Mail have been the default Web and email apps for iOS and, later, iPadOS. There was no way to choose alternatives that would be used whenever an app wanted to open a Web page or create an email message. That has now changed with iOS 14 and iPadOS 14. To switch to a different Web browser (such as Brave, DuckDuckGo Privacy Browser, Firefox, Google Chrome, Microsoft Edge, or Opera Touch) or a different email app (such as Boomerang, Chuck, Hey, Gmail, Outlook, Polymail, or Spark), follow these directions. In Settings, tap the name of the browser or email app you want to set as the default. Then tap Default Browser App or Default Mail App and select the desired app.

(Featured image based on an original by Sotiris Gkolias from Pexels)

Unsubscribe from Marketing Email to Lighten Your Inbox Load

Are you overwhelmed by email? Is your Inbox filled with promotions, special offers, and the like? These messages aren’t spam—you almost always bought something from the company or have some sort of relationship with the sender—but that doesn’t mean you want to hear from them repeatedly. Luckily, it’s easy to get off the lists of legitimate senders. Just scroll to the bottom of each message and look for an unsubscribe link. Often it will be the word “Unsubscribe” or an instruction to “click here to remove yourself.” Click the link and, if necessary, click an Unsubscribe button on the resulting Web page. Then delete the message and move on to the next one. After a week or so of doing this regularly, you should start to notice a marked decrease in unwanted messages.

(Featured image by Sharon McCutcheon on Unsplash)

Ever Wanted to Get a Custom Email Address? Here’s How (and Why)

Some facts about ourselves are difficult or impossible to change, but your email address doesn’t have to be one of them. Switching to a custom email address might seem overwhelming, and it will take some time, but it’s not that hard or expensive (and we’re always happy to help if you get stuck).

Why Consider Switching to a Custom Address?

Why would you want to take on such a task? Independence. If you’re using the email address that came from your Internet service provider, you could end up in an awkward situation if you have to move and switch ISPs. Any address that ends in @comcast.net, @anything.rr.com, @verizon.net, @earthlink.net, or the like could be problematic. You also don’t want to rely entirely on a work email address—there’s no guarantee that your employer will forward email for you indefinitely if you take a different job.

Also, an email address says something about you, much as a postal address does—there’s a difference between an address on Central Park versus one in the Bronx. If you’re not happy with what your email address implies, you might want to switch.

What can an email address reveal? Those with a free Juno, Hotmail, or Yahoo account likely signed up years ago and don’t take email very seriously. People who use an @icloud.com, @me.com, or @mac.com address are clearly Apple users, and those with an address ending in @live.com, @msn.com, or @outlook.com are probably Windows users. .edu addresses identify students, teachers, and school employees—but if you’re not one anymore, your email looks like you’re wearing a varsity jacket in your 40s. The big kahuna of email is Gmail, which boasts about 1.5 billion users worldwide now—as a result, using a Gmail address is fairly generic.

The ultimate in independence comes when you register your own domain name, which usually costs less than $20 per year at sites like 1&1 Ionos, Domain.com, easyDNS, Directnic, and Register.com. Then your address can be anything you want at your new custom domain, and you never again have to worry about being tied to your ISP or associated with a free email host.

How to Change to a Custom Address

Step 1: Register a new domain name. The hard part here is thinking of a name that hasn’t already been taken. It’s best to stick with the traditional top-level domains like .com, .net, and .org—if you get into the new ones like .beer (yes, that’s available), your email is a bit more likely to be marked as spam. Most domain registrars will also host your email for you, and if you go this route, you can skip Step 2.

Step 2: If you’re already using Gmail or another independent email provider that isn’t tied to your ISP, log in to your account at your domain registrar and configure it to forward all email to your existing email address. In this case, you can skip Steps 3 and 4.

However, if you aren’t happy with your current email provider, you’ll need to set up an account with a new one. There are lots, but many people use a paid email provider like FastMail or easyMail that usually charges less than $50 per year and supports multiple mailboxes. When you set up the account, you’ll need to create one or more new email addresses at the provider and configure MX (mail exchange) records with your domain registrar—the service will provide instructions for this.

Step 3: If you’re changing email providers as part of this process, you’ll need to configure Mail—or whatever email client you’re using—to connect to your new email account with the login credentials you set up. That’s not hard, but being able to send email that comes from your custom address can require some effort with the free email providers. Gmail provides instructions, and others that support this feature will as well. Unfortunately, iCloud won’t let you send email using a custom address.

Step 4: If you’re moving to a new email provider, you’ll need to forward your mail from your old provider to your new custom address. Most email providers and ISPs have a screen somewhere in the account settings of their Web sites that lets you enter a forwarding address.

Step 5: Tell your family, friends, and colleagues about your new email address, and update mailing lists and accounts at sites like Amazon that send you email. The forwarding you set up in the previous step will ensure you don’t miss anything during the transition, but remember that if you cancel your old ISP account, that forwarding may end immediately, so it’s important to start the process well in advance.

The details will vary depending on your choice of domain registrar and email provider, so again, if you would like additional recommendations or assistance in setting all this up, just let us know.


Social Media: Setting up a custom email address with your own domain isn’t that hard or expensive, and it gives you independence from your ISP, employer, or the sketchy email provider you signed up with after college. Here’s how you can switch.

iCloud Services Being Wonky? Check Apple’s System Status Page

Many Apple users rely on mac.com, me.com, or icloud.com email addresses, along with plenty of other iCloud-related services. So if you can’t send or receive email, if photos aren’t transferring via iCloud Photo Library, or if some other iCloud-related service isn’t responding, the first thing to do is check Apple’s System Status page. It’s updated every minute, and if it shows that the associated Apple service is having problems, you know to sit tight until things come back up. If everything is green, you’ll have to look elsewhere for a solution—or get in touch with us.