Security and Compliance Overview¶

Protecting email requires secure account access, correct domain authentication, and careful handling of suspicious messages. Use this checklist to improve the security of your StridX Mail domain.

Secure accounts and connections¶

• Use a unique, strong password for every mailbox and change it promptly if it may have been exposed.
• Give each person an individual mailbox. Use aliases or shared mailboxes where appropriate instead of sharing passwords.
• Use encrypted connections in mail apps. StridX Mail client settings use SSL/TLS for IMAP and SMTP.
• Remove access for people who no longer need it and review forwarding rules periodically.
• Keep devices and email apps updated, and protect them with a screen lock.

Authenticate your domain¶

Configure SPF, DKIM, and DMARC in the DNS zone for your sending domain. These records help receiving mail systems verify that messages using your domain are authorized and unaltered.

Use the exact record values shown for your mail service and DNS provider. See DKIM, SPF, and DMARC setup.

Handle suspicious email¶

• Be cautious with unexpected links, attachments, payment requests, and password prompts.
• Verify sensitive requests using a known contact method, especially when a message asks you to change bank details or send credentials.
• Report suspected phishing to your mail administrator and do not forward it as an attachment unless asked.
• Review spam settings carefully so legitimate business mail is not unintentionally blocked.

Plan for data handling¶

Decide who may access mailboxes, how long messages should be retained, and how departing employees’ mail should be handled. Apply those decisions consistently with your organization’s policies and obligations. Keep backups and test recovery procedures if your organization depends on email records.

Security controls do not guarantee that every malicious message will be blocked. Train users to report suspicious messages and review account and delivery issues promptly.