Enhancing ProtonMail Security: Essential Settings & Tips (These are a must do!)

0:00 In this video today, I am going to go over three setti...

0:00
In this video today, I am going to go over three settings that you absolutely have to have enabled on proton mail. If not, you could risk having someone hack in, losing your data, and frankly, losing your account. and it looks like well, there was a Black Friday sale for a proton mail. This is actually the second time. I've done this video the first time. I forgot to turn my mic on so we're gonna go through this so the first thing you're going to want to do is go ahead and sign into your proton mail account.
0:31
Once you login, you'll get to your Dashboard, And right here, in the upper right-hand corner, click on Settings, All Settings, OK. Here we go. The first one we're gonna look at is, well, the three that we're gonna look at right now in this video is recovery.
0:51
And passwords, and security and privacy. So the first one we're going to do is recovering, and this is, I believe, a free account that I have first enter a recovery e-mail address. This could be your other e-mail address, like a Gmail, or your own domain, or someone that you trust, but this is what you're going to need to recover your account. There's, there's two parts to this. There's Account Recovery, and there's data recovery. So you could, you could recover your account, which would mean you'd be able to login and send and receive new e-mail, but if you don't have data recovery enabled, you will be able to get into your account, but you will not be able to get into any of your old e-mail because it's encrypted with an encryption key. So let's work on your account recovery. First, put an e-mail address in here, and then click on allow recover by e-mail. I have to put an e-mail address, and we're not going to do that right now. And then go ahead and do recovery phone number.
1:49
Put a phone number in here, and then click Allow Recovery by Phone. That will allow you to recover your account. Now, if you lose your information here, then you can retrieve it by either the e-mail address or the phone. But, the data recovery, you're gonna need to have your 12 words, and I believe it's 12 words, and you can, if you don't have this enabled, I think you have to, by default. But, make sure you have your information. You can store it in your password manager, someplace easy someplace that you're not going to forget where you store it. So, that's the first one, Account Recovery and data recovery.
2:33
The second one we're going to want to do, check the settings, is account and password. And this is what I'm kind of surprised. Most people don't have enabled which is the authenticator app. So, go ahead. Click on the authenticator app. You have to enter your password there, authenticate, and then you're going to use your Google authenticator, LastPass authenticator, whatever authenticator your two factor, your multifactor authentication app. You're going to click Next. I'm not going to do it, because I don't want to have to hide it. But what I would also recommend is a security key, like you, Becky, where you can secure and lock down your account, using the touch of a little button, to unlock it. So those two settings, the recovery, the account, and password settings. And then let's look at security and privacy.
3:31
This is one that I know people miss, because it's not on by default, But I was working with someone who had not set two factor authentication or multi factor authentication. And their proton mail was hacked.
3:43
But what they didn't have was they didn't have enable advanced logs.
3:48
And so I highly recommend clicking advanced logs or enable advanced logs, so that if for some reason, someone's snooping, If for some reason, it's compromised, which it shouldn't be, if you have your multifactor authentication enabled, but this will give you some information on where those people are. And what happened was this person's proton mail was hacked into and of course they went to ... Brown and tried to get coins sent out from there. So, if this is the account that you use for crypto, or your bank or whatever, make sure you lock it down and keep it secure. And add this little enable, advanced log settings, and that will help you out. It's right under security and privacy. Thanks a lot, everybody!
4:36
Have a great day.

Executive Summary:

In this instructional video, George, an expert in email security, walks viewers through crucial settings and practices to enhance the security of their ProtonMail accounts. The video is structured around three main segments, each addressing a different aspect of account security.

1. Account and Data Recovery: George begins by emphasizing the importance of setting up account recovery options. He suggests adding a recovery email address and phone number, explaining that these are vital in regaining access to your account in case of lost credentials. However, he highlights a critical distinction between account recovery, which allows access to the account, and data recovery, which is necessary to decrypt and access old emails. George advises viewers to enable data recovery and securely store the required 12-word recovery phrase, possibly in a password manager.

2. Account and Password Security: The second segment focuses on enhancing login security. George is surprised to find that many users do not use the authenticator app for two-factor authentication (2FA), a feature that significantly bolsters account security. He recommends using an authenticator app like Google Authenticator or LastPass and considers the addition of a security key, which can provide an extra layer of protection.

3. Security and Privacy Settings: In the final segment, George addresses the need for advanced security measures like enabling advanced logs. This feature, often overlooked as it is not enabled by default, provides detailed logs of account activity. It can be crucial for identifying unauthorized access or breaches, especially for accounts linked to sensitive services like cryptocurrency or banking.

Throughout the video, George provides a step-by-step guide on navigating through ProtonMail’s settings, making it easy for viewers to follow along and implement the recommended security measures.

Key Points:

1. The video focuses on securing ProtonMail accounts with essential settings.
2. Emphasizes the importance of setting up account recovery options.
3. Distinguishes between account recovery and data recovery.
4. Advises the use of a recovery email and phone number for account recovery.
5. Stresses the need to enable data recovery and securely store the recovery phrase.
6. Highlights the underuse of two-factor authentication among ProtonMail users.
7. Recommends using an authenticator app for enhanced login security.
8. Suggests the addition of a security key for extra protection.
9. Stresses the importance of enabling advanced logs for tracking account activity.
10. Targets users who link their ProtonMail to sensitive services like cryptocurrency or banking.

11 Responses

Leave a Reply