Completely valid point. Hypothetically lets say you have a work email, which you also use for your finances. Due to your work email being your business contact, it will be easily connected to your online persona, anyone who gets a hold of your email will know exactly who you are in the real world. This becomes a problem because when you are stripped of your anonymity, you become more vulnerable to different forms of online attack, such as targeted phishing, doxing and extortion, if your pockets are big enough you may even be vulnerable to being simswapped/having the port out scam done on you.
@OP Another useful thing you might wanna include is + tags.
+ tags are essentially a way to make 1 email in to many.
If I register for a service, lets say coinbase on the email
Ux123@gmail.com (Not my actual email), then I can't register another email on that.
By using + tags, you can, If I wanted to register another account, I could simply register it under Ux123+coinbase@gmail.com, it would recognize it as a seperate email, but all emails from coinbase in regards to the account registered on the +coinbase tag would still be delivered to me. Using + tags also makes it harder to find out if its actually your email or not, because more often than not in forgot password forms, you have to enter the email. If I don't have a coinbase account on
Ux123@gmail.com but I do have one on Ux123+Coinbase@gmail.com, simply inputting
UX123@gmail.com in to the field in the forgot password form will give any matches or send an email, meaning unless the account that the hacker has attempted to acquire was on a social network that was freshly breached, they won't even think you have a coinbase account.
Hopefully I was able to actually get my message across, I haven't slept in like 2 days.
Anyways, great point OP.
Show Posts
