Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are three ways to access your GMail account on iPhone or iPad devices: 1. Use safari browser 2. Use Apple's default mail app 3. Use Google's Gmail app

What is the safest way to access gmail account? How about stored (downloaded) emails in case of app usage? Is there anything user can do in order to increase email safety (use SSL for example)?

share|improve this question
I think this is off topic, or generally a boring question. The answer is: "It doesn't matter, its all over HTTPS." – rook Apr 5 '12 at 23:49
But app stores emails on the device, do you think they're encrypted? Can the app be compromised (so even HTTPS won't help? – Paul Podlipensky Apr 5 '12 at 23:52
If the device is compromised encryption won't help. The attacker can just wait until you decrypt it for him. – rook Apr 5 '12 at 23:55
Okay, and what is easier to compromise? Safari, Mail or GMail app? – Paul Podlipensky Apr 5 '12 at 23:57
Be careful, with a loaded question like that you are asking for a flame war. – rook Apr 5 '12 at 23:58
up vote 0 down vote accepted

All of these apps will use SSL in some flavor (probably https) to contact Google. Google doesn't provide another interface for good reason.

Everything can be compromised. You can be hacked though your browser and it doesn't matter what device you are using. Once the attacker is on your machine it doesn't matter if your email is encrypted. The attacker can wait until you decrypt it, or just take your password.

share|improve this answer
Okay, looks like I won't get more specific answer. I was aware of this general security overview, but thanks for your time. – Paul Podlipensky Apr 6 '12 at 0:17

You can create an application specific password. At least if it gets compromised, you wont have to change your regular password.

I'm not sure if it logs what device used it, but ideally it would do that.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.