--- title: How To Protect Your Email from Cyber Threats description: How to protect your email from hackers & other cyber threats with two-factor authentication for MDaemon Webmail. image: https://blog.mdaemon.com/hubfs/Hacker_Keyboard_Green-1.png --- [![MDaemon Technologies](https://blog.mdaemon.com/hs-fs/hubfs/MDaemon-Technologies_logo_large.png?width=564&height=110&name=MDaemon-Technologies_logo_large.png "MDaemon Technologies")](https://mdaemon.com/) - [Blog Home](https://blog.mdaemon.com) # MDaemon Technologies Blog ## [How To Protect Your Email from Cyber Threats](https://blog.mdaemon.com/how-can-you-protect-your-email-from-cyber-threats) By [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro) - [Tweet](https://twitter.com/share) ![Hacker\_Keyboard\_Green-1](https://blog.mdaemon.com/hs-fs/hubfs/Hacker_Keyboard_Green-1.jpg?width=600&name=Hacker_Keyboard_Green-1.jpg) We live in an era where the amount of valuable data businesses must store is increasing at an unprecedented pace. Consequently, the number of cyber criminals trying to gain access to that data is also increasing. In fact, according to a report released last year by [Osterman Research](https://dm-mailinglist.com/subscribe?f=3fbf9ec7), 81% of organizations have been the victim of some type of data breach, targeted email attack, successful phishing attack or other cyber security incident during the previous 12 months. And with the surge of people working from home due to the COVID-19 pandemic, these numbers are only going to go up. The problem is made worse by the fact that many people do not follow recommended login security and password complexity guidelines. A recent report, “[The Psychology of Passwords](https://www.lastpass.com/psychology-of-passwords)” revealed the following statistics: - 91% of people use the same password on multiple accounts - 66% continue to use the same password, even if they're aware of the risks - 53% haven't changed their passwords in a year What’s even more shocking is the fact that many people continue to use weak passwords. Did you know that even today, one of the most common passwords is [123456](https://www.scientificamerican.com/article/the-mathematics-of-hacking-passwords/)? This practice of using passwords that are easy to remember makes them vulnerable to dictionary attacks, which use lists of commonly used passwords that have been organized by popularity. These practices work quite well because people tend to use common words, first and last names, or short phrases that are easy to remember. IT administrators can alleviate some of these bad practices by implementing and enforcing password policies. This includes requiring strong passwords and regular password changes ([here’s how to do it in the MDaemon email server](http://help.altn.com/mdaemon/en/index.html?passwords.htm)). Even these practices are evolving as evidenced by the National Institute of Standards and Technology and its [password guidelines](https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver). ## Why Passwords Alone May Not Keep Your Email Safe Hackers have some pretty sophisticated tools at their disposal for attempting access to confidential information. They use a variety of tactics, including phishing, social engineering, malware, brute force attacks and dictionary attacks. They may even use near-match spoofing of domain names in email addresses or hyperlinks that, when clicked, lead to malicious websites with online forms designed to harvest usernames and passwords. To make matters worse, chances are that strong password you thought was secure may have already been stolen in a data breach. A good resource to learn if your password has been compromised is [Have I Been Pwned (spelling is correct)](https://haveibeenpwned.com/Passwords) to see if yours is on the list. Passwords are not just vulnerable to external threats. They must be protected from internal threats, as well. Have you ever written down a password on a piece of paper and then thrown it in the garbage or discarded an old hard drive without destroying it? Do you keep a list of login credentials on your phone? If this information gets in the wrong hands, it can lead to all kinds of problems, including identity theft or severe financial loss for your employer and damage to its reputation. **How to Protect your Email from Hackers with Two-Factor Authentication** One of the best ways to overcome the shortcomings of passwords and prevent someone from hacking into your email is to use two-factor authentication (2FA). Here’s how it works: Passwords and usernames belong to one of three types of identification data: 1. Something you know 2. Something you own 3. Something you are or do (such as a fingerprint or other biometric element) The three items above are considered factors of authentication. When only one type of data is used to log into a system (such as a username and password, which is “something you know”), you are using a single factor of authentication. Passwords alone are often not enough to protect your email and data against increasingly sophisticated attacks. Requiring a second factor of authentication can help protect your account from hackers and drastically reduce security breaches and data theft. Two-factor authentication is not a new concept. In fact, most of us already use it in other ways besides accessing our email. Here are some examples of two-factor authentication that many of us already use daily: - An ATM card (something you own) and a PIN (something you know) - A credit card (something you own) and a zip code (something you know) - A phone (something you own) and a fingerprint (something you are) ### **How to Configure Two-Factor Authentication in MDaemon Webmail** Two-factor authentication is available in many email services, including MDaemon's integrated webmail. With two-factor authentication, users must provide two forms of authentication – a password and a unique verification code that is obtained via any client that supports [Google Authenticator](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en)(available in the [Google Play store](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_US)). In this video, we demonstrate how to enable and use two-factor authentication in the MDaemon email server and its webmail. #### Two-factor authentication has many benefits: - It provides an extra layer of defense when a password isn’t strong enough. - It reduces online identity theft, phishing, and other social engineering tactics because a victim’s password isn’t enough to gain access to his or her data. - It helps companies in finance, health care, and other industries comply with PCI, HIPAA and other regulations. - It makes working remotely safer. You can find more information on how to configure two-factor authentication for MDaemon Webmail and MDaemon Remote Administration [in our knowledge base](https://www.altn.com/Support/KnowledgeBase/KnowledgeBaseResults/?Number=1141). Tags: [Email Gateway How-To](https://blog.mdaemon.com/topic/email-gateway-how-to), [Email Privacy](https://blog.mdaemon.com/topic/email-privacy), [Cybersecurity](https://blog.mdaemon.com/topic/cybersecurity), [Two-Factor Authentication](https://blog.mdaemon.com/topic/two-factor-authentication), [Email Best Practices](https://blog.mdaemon.com/topic/email-best-practices) ![Brad Wyro](https://blog.mdaemon.com/hs-fs/hubfs/Brad-2023v2.jpg?width=100&height=100&name=Brad-2023v2.jpg) #### Written by [Brad Wyro](https://blog.mdaemon.com/author/brad-wyro) Brad has worked in technical and marketing roles at MDaemon Technologies, where he contributes as Content Marketing Manager. Brad balances technical and creative information to develop easy to understand videos and content to educate prospects and customers. [![BACK TO ALL ARTICLES](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/6572702/05b24dbb-70a6-4eaa-9507-321cb27f7228) ### Subscribe to Email Updates - [Popular](https://blog.mdaemon.com/how-can-you-protect-your-email-from-cyber-threats#tab-2) - [Recent](https://blog.mdaemon.com/how-can-you-protect-your-email-from-cyber-threats#tab-1) - [Categories](https://blog.mdaemon.com/how-can-you-protect-your-email-from-cyber-threats#tab-3) ### Lists by Topic - [Email Security (73)](https://blog.mdaemon.com/tag/email-security) - [MDaemon Email Server (45)](https://blog.mdaemon.com/tag/mdaemon-email-server) - [Email How To (37)](https://blog.mdaemon.com/tag/email-how-to) - [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices) - [Phishing (28)](https://blog.mdaemon.com/tag/phishing) - [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates) - [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email) - [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email) - [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity) - [Email Security Best Practices (23)](https://blog.mdaemon.com/tag/email-security-best-practices) - [Email Server (22)](https://blog.mdaemon.com/tag/email-server) - [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication) - [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to) - [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends) - [SecurityGateway (13)](https://blog.mdaemon.com/tag/securitygateway) - [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security) - [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing) - [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention) - [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption) - [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing) - [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail) - [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving) - [Email Management (8)](https://blog.mdaemon.com/tag/email-management) - [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy) - [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing) - [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise) - [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus) - [Email Software (6)](https://blog.mdaemon.com/tag/email-software) - [Tutorial (6)](https://blog.mdaemon.com/tag/tutorial) - [Update (6)](https://blog.mdaemon.com/tag/update) - [Collaboration (5)](https://blog.mdaemon.com/tag/collaboration) - [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication) - [Compliance (4)](https://blog.mdaemon.com/tag/compliance) - [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration) - [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server) - [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative) - [Passwords (4)](https://blog.mdaemon.com/tag/passwords) - [Software update (4)](https://blog.mdaemon.com/tag/software-update) - [Archive (3)](https://blog.mdaemon.com/tag/archive) - [Attachments (2)](https://blog.mdaemon.com/tag/attachments) - [Business Email (2)](https://blog.mdaemon.com/tag/business-email) - [Cloud (2)](https://blog.mdaemon.com/tag/cloud) - [DMARC (2)](https://blog.mdaemon.com/tag/dmarc) - [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight) - [MDaemon (2)](https://blog.mdaemon.com/tag/mdaemon) - [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats) - [msp (2)](https://blog.mdaemon.com/tag/msp) - [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay) - [BEC (1)](https://blog.mdaemon.com/tag/bec) - [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter) - [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning) - [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter) - [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl) - [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery) - [Email Collaboration (1)](https://blog.mdaemon.com/tag/email-collaboration) - [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews) - [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt) - [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats) - [Gateway (1)](https://blog.mdaemon.com/tag/gateway) - [Inbox (1)](https://blog.mdaemon.com/tag/inbox) - [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero) - [Macros (1)](https://blog.mdaemon.com/tag/macros) - [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring) - [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine) - [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax) - [Software (1)](https://blog.mdaemon.com/tag/software) - [Training (1)](https://blog.mdaemon.com/tag/training) - [Troubleshooting (1)](https://blog.mdaemon.com/tag/troubleshooting) - [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade) - [Web Conferencing (1)](https://blog.mdaemon.com/tag/web-conferencing) - [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server) - [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat) - [ssl (1)](https://blog.mdaemon.com/tag/ssl) - [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams) see all ### Posts by Topic - [Email Security (73)](https://blog.mdaemon.com/tag/email-security) - [MDaemon Email Server (45)](https://blog.mdaemon.com/tag/mdaemon-email-server) - [Email How To (37)](https://blog.mdaemon.com/tag/email-how-to) - [Email Best Practices (29)](https://blog.mdaemon.com/tag/email-best-practices) - [Phishing (28)](https://blog.mdaemon.com/tag/phishing) - [Product Updates (28)](https://blog.mdaemon.com/tag/product-updates) - [Security Gateway for Email (27)](https://blog.mdaemon.com/tag/security-gateway-for-email) - [Stop Spam Email (25)](https://blog.mdaemon.com/tag/stop-spam-email) - [Cybersecurity (24)](https://blog.mdaemon.com/tag/cybersecurity) - [Email Security Best Practices (23)](https://blog.mdaemon.com/tag/email-security-best-practices) - [Email Server (22)](https://blog.mdaemon.com/tag/email-server) - [Two-Factor Authentication (18)](https://blog.mdaemon.com/tag/two-factor-authentication) - [Email Gateway How-To (17)](https://blog.mdaemon.com/tag/email-gateway-how-to) - [Email Security Trends (15)](https://blog.mdaemon.com/tag/email-security-trends) - [SecurityGateway (13)](https://blog.mdaemon.com/tag/securitygateway) - [Health Care Security (12)](https://blog.mdaemon.com/tag/health-care-security) - [Spear Phishing (12)](https://blog.mdaemon.com/tag/spear-phishing) - [Data Leak Prevention (11)](https://blog.mdaemon.com/tag/data-leak-prevention) - [Email Encryption (11)](https://blog.mdaemon.com/tag/email-encryption) - [Anti-Spoofing (10)](https://blog.mdaemon.com/tag/anti-spoofing) - [MDaemon Webmail (10)](https://blog.mdaemon.com/tag/mdaemon-webmail) - [Email Archiving (8)](https://blog.mdaemon.com/tag/email-archiving) - [Email Management (8)](https://blog.mdaemon.com/tag/email-management) - [Email Privacy (8)](https://blog.mdaemon.com/tag/email-privacy) - [Email Spoofing (8)](https://blog.mdaemon.com/tag/email-spoofing) - [Business Email Compromise (7)](https://blog.mdaemon.com/tag/business-email-compromise) - [Anti-Virus (6)](https://blog.mdaemon.com/tag/anti-virus) - [Email Software (6)](https://blog.mdaemon.com/tag/email-software) - [Tutorial (6)](https://blog.mdaemon.com/tag/tutorial) - [Update (6)](https://blog.mdaemon.com/tag/update) - [Collaboration (5)](https://blog.mdaemon.com/tag/collaboration) - [Email Authentication (5)](https://blog.mdaemon.com/tag/email-authentication) - [Compliance (4)](https://blog.mdaemon.com/tag/compliance) - [Email Remote Administration (4)](https://blog.mdaemon.com/tag/email-remote-administration) - [MailStore Archive Server (4)](https://blog.mdaemon.com/tag/mailstore-archive-server) - [Microsoft 365 Exchange Alternative (4)](https://blog.mdaemon.com/tag/microsoft-365-exchange-alternative) - [Passwords (4)](https://blog.mdaemon.com/tag/passwords) - [Software update (4)](https://blog.mdaemon.com/tag/software-update) - [Archive (3)](https://blog.mdaemon.com/tag/archive) - [Attachments (2)](https://blog.mdaemon.com/tag/attachments) - [Business Email (2)](https://blog.mdaemon.com/tag/business-email) - [Cloud (2)](https://blog.mdaemon.com/tag/cloud) - [DMARC (2)](https://blog.mdaemon.com/tag/dmarc) - [Industry Insight (2)](https://blog.mdaemon.com/tag/industry-insight) - [MDaemon (2)](https://blog.mdaemon.com/tag/mdaemon) - [insider threats (2)](https://blog.mdaemon.com/tag/insider-threats) - [msp (2)](https://blog.mdaemon.com/tag/msp) - [Anti-Relay (1)](https://blog.mdaemon.com/tag/anti-relay) - [BEC (1)](https://blog.mdaemon.com/tag/bec) - [Backscatter (1)](https://blog.mdaemon.com/tag/backscatter) - [Bayesian Learning (1)](https://blog.mdaemon.com/tag/bayesian-learning) - [Content Filter (1)](https://blog.mdaemon.com/tag/content-filter) - [DNS-BL (1)](https://blog.mdaemon.com/tag/dns-bl) - [Disaster Recovery (1)](https://blog.mdaemon.com/tag/disaster-recovery) - [Email Collaboration (1)](https://blog.mdaemon.com/tag/email-collaboration) - [Email Software Reviews (1)](https://blog.mdaemon.com/tag/email-software-reviews) - [Encrypt (1)](https://blog.mdaemon.com/tag/encrypt) - [External Email Threats (1)](https://blog.mdaemon.com/tag/external-email-threats) - [Gateway (1)](https://blog.mdaemon.com/tag/gateway) - [Inbox (1)](https://blog.mdaemon.com/tag/inbox) - [Inbox Zero (1)](https://blog.mdaemon.com/tag/inbox-zero) - [Macros (1)](https://blog.mdaemon.com/tag/macros) - [Monitoring (1)](https://blog.mdaemon.com/tag/monitoring) - [Quarantine (1)](https://blog.mdaemon.com/tag/quarantine) - [RelayFax (1)](https://blog.mdaemon.com/tag/relayfax) - [Software (1)](https://blog.mdaemon.com/tag/software) - [Training (1)](https://blog.mdaemon.com/tag/training) - [Troubleshooting (1)](https://blog.mdaemon.com/tag/troubleshooting) - [Upgrade (1)](https://blog.mdaemon.com/tag/upgrade) - [Web Conferencing (1)](https://blog.mdaemon.com/tag/web-conferencing) - [Windows Server (1)](https://blog.mdaemon.com/tag/windows-server) - [internal email threat (1)](https://blog.mdaemon.com/tag/internal-email-threat) - [ssl (1)](https://blog.mdaemon.com/tag/ssl) - [tax scams (1)](https://blog.mdaemon.com/tag/tax-scams) See all #### About MDaemon Technologies MDaemon Technologies is a pioneer in developing email and email security software helping to protect customers from evolving cyber-security threats. Its products and services are trusted by thousands of organizations in over 140 countries. For more than two decades, the company’s products have been developed with the ongoing input of IT professionals who demand reliable, affordable software that requires minimal effort to manage. The software can be deployed in virtual, hosted cloud, on-premises, or hybrid network environments. The company sells its software and services directly and through a network of global channel partners. For more information, visit [www.mdaemon.com](https://www.altn.com/). Copyright © 1996-2026 MDaemon Technologies.  View [privacy policy](https://mdaemon.com/policies/privacy-policy).   ###### Contact Us +1.817-601-3222 [sales@help.mdaemon.com](mailto:sales@help.mdaemon.com) 6340 Lake Worth Blvd. Fort Worth, TX 76135 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Brad Wyro", "url" : "https://blog.mdaemon.com/author/brad-wyro" }, "dateModified" : "2020-10-07T04:11:47.561Z", "datePublished" : "2020-05-13T21:55:25.000Z", "headline" : "How To Protect Your Email from Cyber Threats", "image" : [ "https://blog.mdaemon.com/hubfs/Hacker_Keyboard_Green-1.png" ], "mainEntityOfPage" : { "@id" : "https://blog.mdaemon.com/how-can-you-protect-your-email-from-cyber-threats", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.mdaemon.com/hubfs/MDaemon-Technologies_logo_large.png" }, "name" : "MDaemon Technologies" } } ```