Why You Need a DIFFERENT EMAIL Address for Every Account

[@Cah-Games]

Thank you for making these videos about digital security, I'm learning a lot of things! I have a question though: is 2fa enough to prevent a hacker from logging in into my email account (presuming that they don't know my phone number)?

[@Cyberspatial]

CahGames If you're in a targeted attack, a hacker can combine phishing with a web proxy to do a man-in-the-middle attack: 1. Link takes to you real fake login page. You enter credentials 2. Attacker passes credentials to the real login page (automated) 3. Real login page sends you a 2FA code 4. You input the 2FA code to the fake login page. 5. Attacker passes the 2FA code to the real login page. 6. You get redirected the real login page. 7. Both you and the attacker have a real login cookie. I recommend you use a hardware security token like Yuibkey, with U2F FIDO whenever possible instead.

[@phukhue289]

@@Cyberspatial if I have a 2fa app on my phone I think that would that still be vulnerable to a MitM attack right? How would a yubi key protect me from this? Honest question here as I'm trying to learn and build a better security model for myself.

[@Cyberspatial]

@@phukhue289 If you receive a phishing link tha proxies your connection to the real site, you may be tricked into authenticating. The attacker would then be able to MiTM your login cookie and sign in at the same time as you. Using a security key mitigates this because the U2F FIDO standard checks for domain spelling to match. Register websites with a backup security key in case you lose the primary.

[@norrinradd8923]

2FA especially google authentication is not safe if you are targeted your info can be extracted by a device called "man in the middle" you can use 3rd party apps that encrypt messages but they require phone number sooo..... the next best option is a "YubiKey"

[@norrinradd8923]

@@Cyberspatial Oh wow I guess I didn't see that part...... you're right login cookies if stolen can cause alot of problems......

[@783342]

You are a Godsend. My bank accounts have been breached about twelve times. I never thought of using different emails., or double passwords. Thank you so much.

[@Jack.Doughnut]

12 times is extremely high. Are you still having problems?

[@783342]

@@Jack.Doughnut The same person mostly, because I wasn't checking my account..

[@etiennedevignolles7538]

@@783342 I have an email address I only use for banking. I have NEVER had a spam email in there.

[@JCHall-uf2tz]

That Chase email looked pretty well done, I like how they put individual transactions on that. Clever!

[@kbytes92]

I wish I knew this information much earlier. Currently the amount of online accounts of me have quadrupled the last 2 years. I will try to use this service from now on.

[@horsied]

One of the best youtubers I have ever watched! Keep up the good work!

[@horsied]

This channel deserves to blow up!!

[@Cyberspatial]

Thanks!!

[@Evan-ey1bf]

Just got started with maintaining privacy online, your videos are really helpful! Thank you!

[@Cyberspatial]

Appreciate it, shoot us a note if you've got any questions maybe we can address in another video.

[@Evan-ey1bf]

@@Cyberspatial I wanted to know about cloud storages which are secure and encrypted, I've heard the Google drive and One drive aren't that secure or privacy centric, they use it to track you

[@Cyberspatial]

Evan Sequeira Great topic. Currently there's two paid cloud storage providers with a good reputation. One is SpiderOak and the other is Tresorit There is a wonderful app called Cryptomator designed for use with existing cloud providers like Google, OneDrive, or Dropbox. It basically encrypts your data locally first before syncing. The vault is mounted as a network drive. Check it out: cryptomator.org/

[@Evan-ey1bf]

Okay thank you soo much for your help sir!

[@furkan2161]

Underrated KZbinr. Good work!

[@Cyberspatial]

I appreciate that!

[@JCHall-uf2tz]

I love this concept because I teach and use having over 20 email addresses based on category. So basically anything you would make a folder for is just an independent email address. My clients aren't always sold on the security part because they figure their passwords and 2FA will save them. However, the not having to make filters part, no-spam, and device discrimination is appealing. My question is: with either one of the vendors you suggest, do you have to forward to a single email address or is there an option to forward to multiple email addresses? Example, Financial has it's own email address, so can the 10 generated email addresses for logins forward to the dedicated Financial email addy while the 15 generated email addresses for Travel be forwarded do the dedicated email address for Travel or does everything have to forward to a single email address?

[@MaryJones-fs4wf]

this is an en example of what an educational video should be. No trying to be cute, acting, gesturing, flirting, empty talks. THANK YOU. Can you update for 2024?

[@lukrezialaval2406]

I would love to watch the entire video, but the loud music makes it impossible for me to listen to you.

[@mynameisgladiator1933]

What do you do with emails for friends and relatives? Aquaintances?

[@albert21994]

Incredibly well produced! Subscribed.

[@Cyberspatial]

Welcome aboard!

[@jonatanlindstrom584]

A bit late to the party, but how would you say this compares to doing random aliasing and using a catch-all address on a domain you own? As I see it, that would yield a similar outcome without the need for another service than my webhost.

[@liinaennusaar6685]

This is new information to me. Unsure about the services reliability though as no experiences. Thank you for the video.

[@McCov1]

For example. You go to a dentist, Dr's office, Mortgage lender. When you fill out their forms and they ask you for your E-mail. Then what do you do? I have been notified of data being stolen from places like that.

[@marianomontiel]

Have a dummy address? I have 2 main adresses. One for trash stuff and another for more serius trustworthy data

[@MsSunshine1469]

What's a dummy address and how do you create one? I'm new to all of this @@marianomontiel

[@maylin1986]

Finding this video is so informative, even if made over 2yrs ago. Very much appreciated. 🩷✨️ Also, I know some companies will send emails/letters, stating your information was breached. I hate seeing articles saying "If you're a customer of said company, you might be entitled to a settlement." By the time those are written by someone, the closing date to apply for a pie of the settlement is pretty much close to closing. I like this approach because then you know a breach happened and then look for the settlement info asap. That way, even if you have to go through the step of answering questions pertaining to the timeframe/dates a breach happened and how you were affected, you already know you qualify for a settlement.

[@marianomontiel]

This seems like waaaaaay to much of a hassle. I wouldn't be able to deal with all of this. It would drive me crazy! I've just found my email was found in 6 data breaches... this explains the spam emails I've been receiving. EDIT 1 MONTH LATER: I couldnt help but give it a try. It's actually very simple to implement and once it’s set up its VERY easy to the point I don't even feel like I'm doing an extra step. The key is to transition slowly so that you give yourself time to get the hang of things (I'm still in the process after 1 month and have no plans to do it ASAP)

[@MixedDrew]

not a hassle at all, just lazy

[@monkeyseemonkeydo432]

@@MixedDrew Not lazy at all just overwhelmed

[@MixedDrew]

i can agree@@monkeyseemonkeydo432

[@Flexin010]

I have a bunch of accounts. Took me about 3 months. A little here and there a day. It’s worth it. I got data breach and spammed so many times on my yahoo mail. Now i use Custom domain name and masked emails. I love it. I really like it if a company gets too spammy and “doesn’t get the hint” when i click unsubscribe and they keep spamming me, I got to that email name and delete it. Or you can reject it.

[@terap7587]

Great suggestion but I have a question. Most platforms, e.g. Facebook, asks to login using your email address. Does this mean I would have to either memorize the cryptic email address or log into the anonaddy account and copy the lengthy address to log into Facebook?

[@raphmd8209]

A really nice video ! It's even weird that you only have 1.6K subscribers

[@Cyberspatial]

Appreciate it. We've just started, hope to reach more people soon1

[@huh4016]

almost 10k now

[@Cyberspatial]

huh thanks to supporters like you!

[@vamsidharreddy3383]

Hurrraaaayyyyyy!!!!!its 20k now

[@Cyberspatial]

@@vamsidharreddy3383 Thanks for the support!

[@KerrBox92]

i've been using one email address as my primary for years and have no problem deleting spam and other unwanted emails. i use a microsoft account which i am considering almost abandoning in favor of a tutanota account and just keeping the microsoft account for xbox for instance, i also have a gmail account which is only used for google services like youtube, but the idea of having a different email address for every product and service just sounds tiring to be honest

[@treasurerose6732]

This is a great service review thanks! I will be checking them out

[@bobbyblaise7793]

Invaluable information. Subbed. Thank you 👊

[@Cyberspatial]

Awesome, thank you!

[@mariu5]

top notch content and incredible production quality!! subscribed!

[@Cyberspatial]

Thank you! Welcome aboard! 😊

[@dannyl6507]

very well done! thank you for sharing!

[@addd21323]

Interesting concept! Hadn't heard of this before. One question though, wouldn't this break a lot of protections on your main email account (SPF, DMARC, spam filtering, etc) since everything being sent to it is forwarded via the email service (blur, 33mail, etc) which you're essentially whitelisting? It almost seems like it'd be better if your email provider themselves (gmail, outlook) implemented something like this and provided it as a feature that way they could still integrate all their normal protections. I'm curious if email providers pick up on this at some point and offer their own solution. Also, I guess the email randomizing service (blur, 33mail, etc) could also just integrate their own spam/phishing/dns auth protections into the service before forwarding it.

[@Cyberspatial]

You really mitigate spam because ideally each email is shared with only one online account. You can create inbox rules to whitelist those masked emails. AnonAddy and SimpleLogin both handle the SPF/DMARC/spam filtering as well. Haven't gotten spam this way in years. Only the true email address has received phishing and spam because someone in the contacts list got hacked, which leaked it. Apple is looking to do something like it. If you have a fastmail account with custom domain you can created unlimited aliases. And agree this would be interesting down the road if the big providers do it. Protonmail already gives you multiple aliases (limited) on a paid account.

[@Eagle-Striker]

apple's icloud email service has implemented it a few weeks ago

[@21_f_aus]

Just found this video, thank you, and I subbed

[@rlibby404]

@5:20 come on, how many people put in their email password right there? It's so non-descript, there's no way that's an accident. Pretty slick.

[@DeniseSkinner68DeniseSkinner68]

Oh my God that's too much work if an email different password how the heck am I going to remember all that

[@dogecoinguy357]

Any reason you didn't bring up SimleLogin?

[@chadkayser3691]

Fantastic video.

[@jcm5171]

Thanks for this excellent advice !

[@GTWLSamurai7]

learning as i go.

[@geofreykaston6719]

I use two emails.one for all entertainment and it's safe. but the one I used for academics in standard sites is breeched🤦🏻‍♂️(found using link you refered). although useful great content.

[@Cyberspatial]

Awesome! Depending on your threat model may not need a unique one for *every* site.

[@thesleepacademy4012]

can you do a video comparing the different email masking services to each other and which one you'd recommend and why

[@Cyberspatial]

Thanks for the recommendation, though currently, they're not too different. We have actually interviewed the founder of mask email service. Check it here SimpleLogin.io, kzbin.info/www/bejne/m6eTZWufpqmNeZo

[@Skyloftt]

Great video! Is it wise to use the same recovery email address for different email accounts, or does that just connect my data together?

[@Cyberspatial]

If you're concerned about data breaches and those recovery emails being linked together, then it might be wise to use a masked email for them all

[@GTWLSamurai7]

thank you, i did this

[@imuser007]

Really great content bro what about ur opinion abt Anonaddy vs protonmail

[@Cyberspatial]

Naveen I would recommend Protonmail for your main inbox and AnonAddy for forwarding addresses.

[@imuser007]

@@Cyberspatial thanks brother

[@TheYogina]

Great video man. Maskmail is shutting down.

[@DJChirpzTV]

what if you have to provide your email address in person? btw, I'm going to give this a try along with proton.

[@aaron6841]

I've had weak passwords and to be honest the same passwords but lots of different email addresses done this for years lol I'm also considering a new email that isn't linked to any important accounts to hand out to contacts so my email isn't as much known is this a good idea to?

[@Cyberspatial]

Yes you want to compartmentalize your emails. An email address just for new acquaintances is a helpful start.

[@pennywise6672]

Brilliant!

[@Ifuseemenoudidnt]

I have 2 email addresses and I only use 1 for all my social media accounts. So it's fine👍 right?? RIGHT! Sorry for yelling. But yea, I use 1 email for all of my social media accounts but I use different passwords. Ok, I might've also used my second email but only once

[@phukhue289]

This is an honest question, not meant as a disparaging remark against the UK or AnonAddy considering the UK is basically a surveillance state and against privacy, isn't using AnonAddy a little counter productive

[@Cyberspatial]

Great question! AnonAddy's servers are hosted in Netherlands with Greenhost[.]net. In this case your counterparty would be the Dutch government and/or Interpol. If you're really concerned, the software is open-source so you can self-host if desired.

[@norrinradd8923]

I wish they also have this option for phone numbers...... some important apps I'm interested in require phone number one of them is 3rd party secure 2FA, well I don't want my personal phone number stored on some server so I'll just keep using unsecure 2FA lol

[@Cyberspatial]

MySudo, Linphone+Twilio, Google Voice, are options. 2FA you can buy a Yubikey.

[@norrinradd8923]

@@Cyberspatial Yubikey is only useful if the account offers it as an option

[@tschaderdstrom2145]

@@norrinradd8923 or it has sso so you can use a 3rd party idp w/ hardware key

[@americangulag]

I suppose i can just get a minor degree in KZbin Cybersecurity from this channel

[@Cyberspatial]

You can learn a lot from KZbin content creators :)

[@user8eighty949]

but what if I make a google account for example and don't log in for 2 years, when I return will my account still exist?

[@c.a.3342]

If you have multiple emails but on the same Google account, is that still putting you at risk?

[@Veela666]

I just use a password manager, same effect.

[@GoldF4TE]

Great Job

[@vytas5584]

What does "Add a public key" mean?

[@thaik56]

By low value alias, did you mean another forwarding address?

[@Cyberspatial]

Yes.

[@vce2103]

Christ 🤯 - I can barely remember more than 2 passwords… watching this video gives me a headache!?!? And I am in my mid 30’s. Was searching to see if I could use my gmail email address to create a Microsoft account, and found this. After watching this, I feel doomed 😂🤣😫😫😭😭

[@JarppaGuru]

2:40 even all of these so far people not click any of them its not 1990 anymore LOL and email address can random generated uh

[@KKelly1]

Here's a question, currently I am 12 years old and have 2 emails. One for my school and one that's for social media and videogames. When I get older and start looking and applying for jobs I am concerned my personal email will be too silly so I want a new email but I'm also afraid that when I grow up I will lose my email for the videogames. Should I stick with my current personal email or should I change it? Thank you for taking the time to read this. Edit: I just found out my dad has been pwned in 6 data breaches

[@Cyberspatial]

Thanks for the thoughtful question! You can create a professional email using ProtonMail, which probably has more name options than Gmail. Then use a masking service for every other account to forward either to your personal one or your professional one. The one for social media and video games recommend you just change those to masked ones. Use a password manager to track everything.

[@woodenfloor69]

that raidforums icon is hot ngl

[@Cyberspatial]

Lot of people into anime.

[@Lkabss]

Hahaha.... 5 data breaches and i know i used the same exact passwords for like 8 years. My email could log in to like half of all things ive signed up for

[@Cyberspatial]

Hope you sleep well at night 😂

[@antoinetteparry8575]

What I don't understand is; no one knows your password but companies keep telling you, you have to add longer and longer passwords that have to be more and more complicated for no reason at all. My bank asks me on thing. What is your mother's maiden name? Simple.

[@venyari2012]

i use aliases

[@lissam8988]

Why can't I just use several Gmail email accounts?

[@matteomazzucato3024]

Is this video sponsored ? (Just curios, it seems like a legit tool)

[@Cyberspatial]

No it's not :) Voluntarily recommended.

[@Operaxyz]

Is this free

[@sirquadryboss9004]

☝️☝️☝️ He is too good for any kind of hacking

[@0xACAB]

4:26

[@slaughteradops4-xbox120]

👍

[@Cyberspatial]

Thanks for the thumbs up!

[@slaughteradops4-xbox120]

@@Cyberspatial Absolutely. I am in school for comp science and concentrating in cyber security. I appreciate you and the channel you've made immensely.

[@ca7986]

❤️

[@Cyberspatial]

🙌

[@PESACH19]

This is a 10 minute commercial.

[@sonluffy5354]

i created to many and it’s annoying damn my childish brain

[@Cyberspatial]

🤣

[@danvanna9398]

for the algorithm

[@Cyberspatial]

Thank You!

[@lloydsato9484]

bruh

[@thomasglendenning3486]

pure BS!!

[@Ritcheyyy]

To be hones I dont need, I just need two emails, one normal one for test/junk….

[@jackyloudoble808]

❣️