Your Email Is Your Most-Leaked Data: How to Protect It from Data Breaches
When a website is hacked, the first thing attackers get is usually a list of email addresses. Your address is the username for most of your accounts, the target for phishing, and the thread that links your online life together. Protecting it is one of the most effective things you can do for your privacy.
Why a leaked email address is dangerous
- Credential stuffing: attackers try leaked email + password pairs on other sites. If you reuse passwords, one breach can unlock many accounts.
- Targeted phishing: scammers know which services you use and send convincing fake emails.
- Spam: leaked lists are sold and reused for years.
- Profiling: one address across many sites lets data brokers build a profile of you.
How to check if your email was leaked
Breach-notification services such as Have I Been Pwned let you enter your address and see which known breaches include it. Many password managers and browsers also warn you about leaked credentials.
8 steps to protect yourself
- Use a unique password for every account — a password manager makes this easy.
- Turn on two-factor authentication for email, banking and social accounts.
- Change passwords for any service involved in a breach.
- Use temporary email for one-off sign-ups so small, insecure websites never get your real address. Get one here.
- Use aliases for services you keep, so you can switch off one address if it leaks.
- Delete accounts you no longer use — fewer accounts, fewer breaches.
- Be extra careful with emails after a breach — expect phishing that mentions the breached company. See phishing red flags.
- Use your GDPR rights — in the EU you can ask companies what data they hold and request deletion.
The “compartmentalise your email” strategy
| Use | Which address |
|---|---|
| Bank, government, health | Primary address + 2FA |
| Friends, family, work | Primary address |
| Shops and services you keep | Alias or saved temp address with forwarding |
| One-off sign-ups, downloads, Wi-Fi | Temporary email |
Frequently asked questions
Should I change my email address after a breach?
Usually you only need to change your password and enable 2FA. If the address receives heavy spam or phishing, moving important accounts to a new address can help.
Can temp mail be leaked in a breach?
Yes, but it doesn’t matter: the address expires, so attackers can’t use it to reach you.
