Gmail account security tips



As part of National Cyber Security Awareness Month, we recently posted about how to pick a smart password. Having a strong password goes a long way in helping to protect your data, but there are a number of additional steps you can take to help you keep your Gmail account secure:

1. Remember to sign out. Especially when using a public computer, be careful to sign out of your Google account when you're finished. Just click the "Sign out" link at the top right corner of your inbox. If you're using a public or shared computer and want to be extra thorough, you can also clear the browser's cache, cookies and history. Then, completely close the browser. On your personal computer, you can also lock your computer with a password-protected screensaver if you need to step away momentarily. Learn the best ways to lock your screen in Windows or in Mac OS X. Forgot to sign out? Open up a new Gmail session on another computer and use Gmail's remote sign out feature to close any sessions that might still be open elsewhere.

2. Be careful about sending certain sensitive information via email. Once you send an email, you're no longer in control of the information it contains. The recipients, if they so choose, could forward the email or post its contents in a public place. Even if you know and trust the people you're emailing, that information may become exposed if their accounts become compromised or they get a virus on their machines. As a rule of thumb, should you need to provide a credit card number or financial account number to respond to a message, provide it over the phone or in person — not over email. And never share your password with anyone. Google does not email you to ask you for your password, your social security number, or other personal information — so don't send it!

3. Enable "Always use HTTPS." Any time you visit a webpage, your computer needs to send and receive information across the Internet. HTTPS is used to encrypt data as it is transmitted between computers on the Internet, so look for the "https" in the URL bar of your browser to indicate that the connection between your computer and Gmail's servers is encrypted. We use HTTPS on the Gmail login page, and you can choose to protect your entire Gmail session with HTTPS as well. HTTPS can make your mail slower, so we let you make the choice for yourself. Open Settings and choose "Always use HTTPS" on the General tab if you want to turn it on.

4. Be wary of unexpected attachments.To help protect you from viruses and malware, Gmail automatically scans every attachment when it's delivered to you, and again each time you open a message. Attachments you send are also scanned. That said, no system is foolproof, so if you happen to get an email from a friend with an attachment you didn't expect, don't be afraid to ask the sender what it is before you decide whether to open it.

5. Make sure your account recovery information is up-to-date. Your account recovery information helps you regain access to your account if you ever forget your password, or if someone gains access to your account without your permission. We currently offer several paths to account recovery. Every Gmail user must select a security question and answer — be sure to choose a combination that is easy for you to remember, but hard for others to guess or come across by investigating. Don't choose a question like "What is my favorite color?" as others may easily guess the answer. We also encourage you to provide a secondary email address and/or a mobile phone number, so we can send you a link to reset your password if you lose access to your account.

You can find additional security tips for Gmail in our Help Center. Learn more about protecting your computer, website, and personal information by checking out our security series on the Google blog or visiting http://www.staysafeonline.org.

Tip: Recover your password via text message



Even the best of us forget our passwords from time to time. In fact, recovering passwords is one of the top reasons people visit the Gmail Help Center. To help with these situations, we recently added the ability to recover your password via text message.

To turn this on for your account, just sign in, select 'Change Password Recovery Options,' enter your cell phone number and click 'Save.'

Next time you forget your password, enter your username on the password-assistance page, and Google will text you a recovery code. No need to check another email account or even leave the page.

In general, it's a good idea to add as many password recovery options to your Google Account as possible, like a secondary email address and security question. And don't forget to keep them up-to-date.

So, you want to be a Gmail ninja?



If you got 100 new messages, how long would it take you to get through them all? An hour? Five minutes? How would you find the important ones, reply to the ones that require an immediate reply, and mark the ones that you needed to take care of later? Would you use stars, filters, keyboard shortcuts, labels? What about Gmail Labs like tasks or canned responses?

Everybody has their own system for managing email, but some are definitely more efficient than others. Even if you only get a few messages a day, there are probably some simple things you can do to make it easier to get through your inbox and maybe even have a little fun along the way. We know time is valuable, so we asked lots of Googlers for their tips and tricks on how they make the most of Gmail, and we combined the best of these into a guide at www.gmail.com/tips, cheekily entitled "Become a Gmail Ninja." The tips are categorized into ninja belts (white, green, black and master ) based on how much mail you get each day.



For a handy reference that you can pin to your wall or keep on your desk, we even made a printable version of the guide where all the tips fit on one page front and back. And for the first 1024 of you who want them, we'll send a limited-edition, laminated guide for free. Just fill out this form with your address. Sorry, we can only ship to addresses in the US. If you're not one of the lucky 1024, you can still buy a laminated guide at www.barcharts.com.



If you're already a Gmail ninja and have your own tips you'd like to share, let us know and we'll add the best ones to the online guide.

*Our lawyers asked us to make sure it was clear that your contact information won't be maintained longer than necessary to send you the laminated guide and that this offer is "void where prohibited and only while supplies last."

Update (11:59am): Well, that was fast. We've run out of the free laminated guides, but if you weren't part of the first 1024 people to sign up, you can still can buy them for $1.25 at www.barcharts.com/gmail.

Tip: Check and reply from multiple email addresses in Gmail



It's that time of year when students are graduating, and in many cases getting yet another email address to check — an alumni account — as a graduation present.

Whether you have an alumni address, a work account, or your own domain that you like to use, rather than logging in and out of multiple accounts, you can set yourself up so all your mail ends up in your Gmail inbox. And you can send mail from any of the other addresses you own right from Gmail as well.

There are two steps to make this happen:

1. Set up mail forwarding or fetching

Many email providers offer free auto-forwarding to other accounts. Log into your non-Gmail account and set your Gmail address as the forwarding target. If your other account doesn't offer forwarding but supports POP3 access, you can use Mail Fetcher in Gmail to automatically check your other account for new mail and download it to Gmail.

2. Set up custom "From:"

Gmail's custom "From:" feature lets you send mail with one of your other email addresses listed as the sender in place of your Gmail address. There's a good step-by-step for how to set this up in the Help Center, but the basics are adding the address you want to use and then verifying that it belongs to you. Once you have your custom "From:" set up, you can pick which address you want to reply from in the "From:" address drop down while composing messages.

P.S. If you're a recent grad and want more tips on how to use Google during this transition period, check out the Google for Students Blog, where we'll be posting more tips like this weekly for the next couple months.

Tip: Slice and dice your mail with search operators



My friends email me all the time with ideas for improving Gmail. Just this weekend, my friend Dave said he wanted a way to select all of his messages with a certain label (like "urgent"). Two weeks ago, Adam came up with the idea of a button that would filter his inbox to only show unread items. Good ideas, but it turns out that doing stuff like this (and much more) is already possible using search operators.

For example, Dave would just need to search for "in:urgent" to get all items labeled "urgent," and Adam would just search for "is:unread in:inbox" to see all the unread messages in his inbox.

Here are a few other useful ways to filter your inbox:
  • "to:me is:starred" shows all messages sent directly to you that are starred
  • "is:chat from:heather" shows all chat conversations you had with Heather
  • "is:starred -in:inbox" shows all your starred messages that aren't in your inbox (a good way to find anything important that you might have accidentally archived)
  • "from:elliot filename:pdf" shows all messages from Elliot that have a pdf attachment

We've written about search operators here before, but lots of people find them hard to remember. That's why we built Search Autocomplete in Gmail Labs, designed to make searching in Gmail much easier. Instead of having to remember the exact syntax for advanced searches, you can just start typing, and search autocomplete will help you fill in the rest. If you find yourself doing some of the same searches over and over again, consider creating a permanent link to them using Quick Links in Labs.

Update (6/10): Revised the example about searching for a label to use "urgent" instead of "important."

Tip: Manage several email accounts with Multiple Inboxes



A couple weeks back we launched Multiple Inboxes, an experimental feature in Gmail Labs that you can use to customize the different "inboxes" you see in one view when you log into Gmail.

If you forward all your work or school email to Gmail, you can use Multiple Inboxes to see your two accounts separately within the same browser window. Here's how:

1. Turn on Multiple Inboxes from the Labs tab under Settings.
2. Set up a filter to auto-archive all mail sent to your work or school address.
3. Customize one of your multiple inboxes to show mail sent to your other address. To do this, go to the Multiple Inboxes tab under Settings and set up one of the panes to search for mail sent to your other address.



4. (Optional) Use a "custom from" address so that replies will be sent from Gmail but as if they're from your other account. This way, your coworkers or classmates won't know the difference.

I use Multiple Inboxes to keep track of email sent to my college alumni address which I forward to Gmail. I used to filter, label, and auto-archive all these messages (my alumni frisbee team listserve gets tons of mail), but found that I rarely looked at the relevant labels. Now with a separate "inbox" I can see them easily without cluttering my primary inbox.

Tip: Archive mail on your iPhone



Update 8/2/2010: If you're using iPhone OS 4 or newer, archiving in Gmail will work once you go through the standard mail set up — no need to follow these instructions.

Pretty much everyone with an iPhone and a Gmail account has a preference for how to use the two together. Some people prefer the iPhone's built-in email client -- it's fast, syncs everything via IMAP, and works like the rest of the device. Others, myself included, can't live without search and threaded conversations and prefer to bring up Gmail in the browser. And a few people, for whom this tip is geared, read their mail via the client but switch to the browser-based version to clean out their inboxes so they can easily archive rather than delete.

See, the default Gmail set up for iPhone's built-in mail client configures things such that if you delete a message on your iPhone, it's sent to Gmail's Trash. That means in 30 days it's gone forever. Sure, you can archive by clicking the "Move to" button and then selecting "All Mail," but if you're an archive junkie and want mail you delete on your iPhone to get archived in Gmail instead, you just have to re-do the Gmail set up on your phone.

First, get rid of your default set up. Go to Settings > Mail, Contacts, Calendar. Find your Gmail account under "Accounts," click on it, scroll to the bottom, and click "Delete Account." Don't worry -- it'll be back and better than ever in a sec.

Then manually configure IMAP using the "Other" menu option by following the instructions this video (also available in the Gmail Help Center):



From then on, the iPhone's little trashcan icon will archive your mail. You might notice that messages you archive on your phone are actually being added to a new "Deleted Messages" label in your Gmail account -- but they're right in "All Mail" and searchable, just the way you want them.

Tip: Your email, wherever you are on the web, with Toolbar



Are you addicted to email? Do you keep Gmail open on your browser, constantly hitting refresh to get your latest messages?

If you're using Google Toolbar 5 for Internet Explorer (or Toolbar's Firefox version), you can add the Gmail custom button to make your life easier. With the Gmail button, you can get new message alerts, see previews of your mail and use Toolbar's search box to find any message no matter what page you're on.


Google Toolbar also has a "Send to" feature: when you click on the "Send to" icon, a Gmail compose window opens that automatically includes a link to the page you're currently on and any text you have highlighted on that page. This makes it easy to email your friends interesting pages you come across as you browse the web.


Plus, you can also add Google gadgets to your Toolbar to bring your favorite websites and online services closer to you. One of my favorites is the Google Calendar gadget: by clicking on the calendar icon, I can check out my schedule for the next few days and even add events.

To try out these gadgets for yourself, check out Toolbar's gallery.

Tip: Sending empty messages



I often send messages where the subject is the entire message (e.g. "Want to grab lunch at 12:30?"), and Gmail would always prompt me to add in body text.


Now, however, you can add "EOM" or "(EOM)" at the end of the subject line (short for End Of Message), and Gmail will silently send the message without the unnecessary prompt.

Tip: Read your mail without touching your mouse



First, if you don't have Gmail keyboard shortcuts enabled, turn them on in Settings. You'll be glad you did. If you spend a lot of time in Gmail, you'll start shaving milliseconds of every action, which adds up. Get through a hundred or so messages every day and you'll end up with extra minutes each week to read your favorite blogs in Reader -- using Reader's keyboard shortcuts of course.

Here's how I read my mail:

1. Log in.
If I'm on my own computer I don't even have to do this, since I have the "Remember me on this computer" option checked on the Gmail homepage.








2. Get rid of stuff I obviously don't need to read.
I scan the senders and subjects of unread messages in my inbox, navigate through the messages using k to move the cursor (little black triangle) upwards and j to move it back down.











As I'm moving around, I select all of the messages I haven't already filtered but don't need to read using x.











And archive them all with y (e works for this too). Now I just have the messages I should read.

3. Get through the mail I do need to read.
I find a message that looks important or interesting, and open it using the enter key. If I need to reply, I hit r. Reply all? That's a. Once my response is ready to go, tab + enter sends it on its way. Back to my inbox with g + i. More navigating around with j and k, selecting with enter. Archiving (y) and replying (r). Starring some stuff for later (s). The occasional forward (f). Sending with tab + enter.

It may seem like a lot to remember, but for me, these eleven shortcuts have been invaluable and aside from j and k, which I just had to practice, pretty intuitive (g + i? that's for "goto inbox"). If you ever need a quick refresher, hit ? anytime to see the shortcut reference guide. And if you don't like any of them, you can edit the defaults and define your own by enabling Custom keyboard shortcuts in Labs.