Questions tagged [gmail]

Gmail is a free e-mail service provided by Google.

Filter by
Sorted by
Tagged with
111
votes
5answers
16k views

What should I do about Gmail ad asking me for password?

I just got a pop-up after having logged on to Gmail. It said it was from https://googleads.g.doubleclick.net and asked for username and password. What should I do about this? Has anyone else seen ...
84
votes
10answers
15k views

New Gmail login system—going against conventional wisdom?

I noticed that the new gmail login asks for username first, and then confirms if such username exists, before asking for password input. Does this not go against conventional security wisdom to not ...
70
votes
6answers
22k views

Is gmail-to-gmail still insecure? Why?

I have always heard that email is an insecure method of communication; I assume this has something to do with the email protocol itself. But when sending an email from one gmail account to another, ...
66
votes
2answers
18k views

Why does Gmail (add accounts) using SMTP server recommend SSL instead of TLS?

I stumbled something interesting today when I was adding an account to my gmail one. Why is SSL boldly stated as recommended when TLS supersedes SSL? The links for SSL and TLS is the same: https://...
53
votes
5answers
7k views

Is there any way for my ISP or LAN admin to learn my Gmail address as a result of me logging into Gmail's web interface through via their network?

The title says it all, really. I'm Alice, and I want to login to Gmail's web interface through my browser. Ike, the internet service provider, and Adam, the local network administrator, would like to ...
21
votes
3answers
18k views

How is Gmail susceptible to brute-force attacks?

In the Atlantic article "Hacked!" it says: My wife’s password was judged as “strong” when she first chose it for use with Gmail. But it was a combination of two short English words followed by ...
17
votes
3answers
5k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
16
votes
1answer
5k views

Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

I can't believe it happened to me but I entered Gmail account's user-name and password into a website as part of a phishing scam. I use Gmail's 2-step verification and have changed my password. Is ...
16
votes
5answers
50k views

Can the recipient of my emails know my IP address?

When I send out emails using Gmail, is my IP address being recorded? Can the recipient of my Gmail message know my IP address and thus infer where I am located?
12
votes
4answers
2k views

Gmail account hack prevention and recovery

I am doing a research on how to prevent my gmail account from being hacked and what are the options of claiming it back. The associated phone number and recovery email can be changed, in fact I ...
11
votes
1answer
15k views

Imitation Gmail account created - what's the threat?

My parents just received an email from Gmail: From: Gmail Team [mailto:mail-noreply@google.com] Sent: 14 September 2014 04:25 PM To: MyParents@gmail.com MyParents@gmail.com Subject: ...
10
votes
3answers
9k views

How to prove my Gmail has been hacked?

I believed that someone had hacked my Gmail because they were using information contained within my emails in an attempt to try to convince me that they were psychic. I told them that I didn't believe ...
10
votes
2answers
8k views

How to fix a repeatedly hacked gmail account (where 2FA is enabled and passwords are changed)?

A friend of mine came to me for help with this issues. Her Gmail account has been hacked and keeps sending out spam emails to her contacts. This is happening to her on a monthly basis. Each time it ...
10
votes
2answers
2k views

Is it possible to get infected by opening an email in Android Gmail app?

I just received an email from an unknown person, titled "da vinci" and containing a docx file with the same name. Not suspicious at all, right? I have not opened or downloaded the file, but: The ...
9
votes
3answers
6k views

Can my ISP read my gmail even when using HTTPS? Is there a way to prevent that?

Can my ISP read my gmail or other email even when using HTTPS? I guess they can do that since they are the "man-in-the-middle". Is there a way to prevent that? This is related to the news that in ...
8
votes
4answers
14k views

How safe is using personal Gmail and Google Account at work?

Two closely related questions: 1) My boss said it's ok for us to go on our personal email during our breaks. If I do this, can the company steal any information beyond what is viewable on the screen? ...
8
votes
2answers
6k views

Does Gmail's 'preview' feature for documents in the browser prevent malware?

I'm concerned about opening attached Word documents and other files (images, PDFs, etc). Gmail has a feature that previews these in the browser for you in a popup, without leaving the Gmail screen - ...
8
votes
2answers
364 views

How can I track someone logged in my gmail account over imap?

Gmail tells me if someone new logged in to the web-interface (device, browser etc.) But what about IMAP logins? If someone has my password can he stealthy read my mails over IMAP?
8
votes
2answers
1k views

GMail Hack with 2-Factor Auth enabled

I have my business email on GMail. I use 2-factor authentication for access to said business email. I access my business email from 2 computers and 1 mobile Android device. I do not use Outlook or ...
7
votes
5answers
4k views

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
7
votes
1answer
1k views

How can I determine (as a layman) if an E-mail was set to self destruct?

I tried to access an old E-mail to print for a court case only to find there is no content. I checked on all my devices and outlook account. The E-mail in question is from a gmail user and I have ...
7
votes
1answer
3k views

Gmail lets me use my old password

My university's email works through Gmail and I can log on to it either through my uni's website or in Gmail. I recently changed my password and I use it to log in to the schools secure WiFi, school ...
7
votes
3answers
2k views

Is there any security reason that mail services like gmail or yahoomail limit the size of file attachment?

Despite the fact that Email standards such as MIME don't specify any file size limits, but in practice email users will find that they can't send very large files(more than 20 or 25 MB). Some experts ...
7
votes
3answers
13k views

Unknown automatically generated email in sent folder

I just noticed a strange email in my sent folder that I did not send. Here is the header information: To: 5f3d36eb61801dda4063@cloudmailin.net From: ********@gmail.com Date: Mon, 10 Jun 2019 06:54:17 ...
7
votes
3answers
1k views

Why does DKIM verification succeed with a signature from Yahoo when all headers are spoofed to look like GMail?

Today I got a scam e-mail which I decided to disect. I quickly found that it was sent from a GMail address (From, Reply-To, Return-Path) but that the mail itself came from Yahoo. HELO from Yahoo ...
7
votes
3answers
353 views

Is google saving clear text passwords? [closed]

On your GMail account you have the option to add other POP3 accounts to automatically fetch mail from them; Google Mail Fetcher. When enabled you have to specify your username and password, and the ...
7
votes
2answers
224 views

Are all Google app-passwords equal? What is their attack scope?

Upon setting up app-passwords, Google sends a mail: This app password will allow you to access your Google account from a device or application that can only be configured with a username and ...
6
votes
2answers
7k views

How is ZixCorp able to provide email encryption without a password?

I am trying to understand how/if an email I received is being encrypted. A financial institution sent me a verifiable email (i.e. not phising) asking me to fill out a pdf form to complete a ...
5
votes
1answer
9k views

Gmail may be hacked - bulk spam emails being sent FROM Google apps account

I have a Google Apps email (Gmail with my own domain) - let's call it John@example.com. 3 days ago many people in my address book were sent a spam email FROM my John@example.com account. When I ...
5
votes
3answers
2k views

Two-factor verification without a mobile phone?

Currently, some services use a second layer of veficiation if logging in from a new device: Gmail and Facebook send a text or call with a code Facebook generates a code in the mobile application ...
5
votes
2answers
360 views

Potential exploitation of gmail account name policies

I know there have been at least two other questions related to this issue (I will link them if able) but I believe this is a potential scam, based on a recent escalation of events. Earlier in the ...
4
votes
3answers
536 views

How do I recover from an email breach?

A few days ago, I noticed something a little bit off from my Gmail account, my primary account, which all my addresses forward to, was showing less incoming email. Usually I have roughly 6-10 emails ...
4
votes
4answers
466 views

Is this a scam? If yes, how does it work?

I found an email in my Gmail spam folder which has the Gmail trusted sender icon. This seemed strange as I never saw this on spam, and it is making me uncomfortable. I can't figure out what this ...
4
votes
5answers
9k views

How exactly does Google Account decide my device or location is “familiar”?

In Chrome, I delete all cookies and site data. I close the browser and re-open it. I double check that All Cookies and Site Data is a blank list. I type https://mail.google.com/ into the address bar....
4
votes
2answers
185 views

Can single-purpose PCs be useful as a security measure in this situation?

In the context of a small scale operation, we are considering use of single special purpose PCs allocated to single security-sensitive tasks - for example, certain financial operations. The intended ...
4
votes
3answers
693 views

Gmail account hacked - what was it used for?

We use GMail for our business email, we are a small company. I do the mail administration for our domain, and I was recently alerted by an email from Google that a colleague's account had some ...
4
votes
1answer
11k views

Identify if a certain domain is using Office 365 or Google Mail

I have a list of e-mail domains that i wanted to confirm if they're using Office 365 or Google Mail for mail. Checking MX using Nslookup can do the job but I noted that a few companies will use an ...
4
votes
2answers
893 views

Gmail Account Password Compromised Twice In Two Weeks

I have an many Gmail accounts and I've never had any issues like this. I created a new Gmail account for a new website I created. It has the same name as the website, e.g. something.com and something@...
4
votes
1answer
223 views

Can I use Authenticator instead of phone number for Gmail 2FA? [closed]

I want to enable Two-Factor Authentication for my gmail accunt, but when setting this up it asks for my phone number. I don't have a phone (that I want to connect to Gmail), is there another way to ...
4
votes
1answer
330 views

Browsers root CA accepted, countries and checking fingerprints

This is a question derived from several others, and I can not comment on those, so it is not duplicated, please read: In some related questions some users comment that: "They wouldn't ...
4
votes
2answers
4k views

Google Accessed My MSN Account!

I just received a notification from Microsoft that my Microsoft account has been blocked because it's been accessed by an IP address that's never accessed it before. I received this notification as a ...
4
votes
1answer
278 views

Does Google check for Unicode characters to determine spam now in Gmail?

I was reading some tweets from @pwnallthethings regarding the John Podesta spear phishing emails. What the email looked like: The Change Password button link, notice the domain com-...
4
votes
2answers
2k views

Is it secure to send sensitive data through gmail smtp with nodemailer?

I have an application that would send sensitive data through email to specific users. I have setup a google business account which provides email addresses on my business domain. I will be sending ...
4
votes
1answer
748 views

OAuth token vs. application-specific password: any meaningful benefit?

I feel like this should be a duplicate, but I don't see it anywhere. The question is pretty simple. When giving a mail client (say, Thunderbird) access to your e.g. Gmail account, you have the option ...
4
votes
1answer
478 views

Using a gmail oath2 token to access web email

I forgot my password to an old gmail account. I have tried the regular route of going through gmail password recovery: answering questions, it keeps looping back to the questions, so I think I'm ...
4
votes
0answers
98 views

I accidentally commited my a gmail TokenRepsonse-user file linked to my personal Gmail to internal source control

So, I work as a QA UI-Automation developer. We've got a package linked to gmail to pull and examine emails generated from our automated tests, and that email exists as a service. Each test at the ...
4
votes
0answers
80 views

Does a stolen phone mean losing access to Gmail? [duplicate]

If one steals someone's phone, he can easily use the password recovery mechanism to gain access to the person's Gmail account. Even if the victim had a alternative mail for a password recovery, the ...
3
votes
3answers
5k views

Someone shared their google account with me, am I vulnerable?

Recently a friend gave me the credentials to his Google account (GMail and password), so I could check his email while he was on a trip (with no cell signal). He is a trusted friend and not ...
3
votes
2answers
891 views

Phishing e-mail replied to internal email. What is compromised?

We have received a phishing email trying to get money from us, this email came from an account that was spelled closely to our work email but not quite the same. I have looked up the domain and ...
3
votes
1answer
364 views

Why doesn't Google's “new sign-in from X” email notification contain the IP of the computer that connected to my Gmail account?

When someone connects to my Gmail account, I sometimes receive a "new sign-in from X" email notification from Google, which just indicates the OS and the timestamp of the connection. Why doesn't it ...