4 ms·

Shameless plug: move to inbox.eu. We have migration tool to move away from gmail. We use separate auto-generated IMAP password for more secure access via standa

Shameless plug: move to inbox.eu. We have migration tool to move away from gmail. We use separate auto-generated IMAP password for more secure access via standard IMAP protocol. Auto-generated passwords by our experience are secure and we haven't have problems with account hacking via them

tialaramex 5y ago
If the passwords are being used by some automated service this is probably fine, at least modulo the quality of the service implementation. If they're for actual humans, even in the best case you're vulnerable to phishing, also you are a perpetual risk because you know these passwords (or a password equivalent) so an adversary might steal your passwords (e.g. from a backup, logs, test systems, ...) and now they can impersonate all users. It's almost certainly safer than letting users pick their own passwords, but it's less protected than, say, a Google user who set up 2-step, and much less than if they went with Advanced Protection and thus can't get phished or impersonated.
- malinens 5y ago
  I agree but "advanced" users should have the ability to switch advanced protections off (for example, sending emails via SMTP or for easier migration to another provider)
whyoh 5y ago
Just a comment: the difference between business and personal accounts is not very clear. It looks like the business account is better, but it's cheaper. Or is that price just temporary? That slow long scrolling of the pages isn't great either. I suggest making some simple comparison table/chart.
- malinens 5y ago
  Thanks for feedback and I agree with you. Owners of inbox.eu first wanted to market product for less technical small business people. Now we are moving away from this business model and will give more priority for custom domain e-mail. Soon we are launching new pricing page with feature list of free/premium personal mailboxes and custom domain mailboxes

tialaramex 5y ago

If the passwords are being used by some automated service this is probably fine, at least modulo the quality of the service implementation. If they're for actual humans, even in the best case you're vulnerable to phishing, also you are a perpetual risk because you know these passwords (or a password equivalent) so an adversary might steal your passwords (e.g. from a backup, logs, test systems, ...) and now they can impersonate all users. It's almost certainly safer than letting users pick their own passwords, but it's less protected than, say, a Google user who set up 2-step, and much less than if they went with Advanced Protection and thus can't get phished or impersonated.

malinens 5y ago
I agree but "advanced" users should have the ability to switch advanced protections off (for example, sending emails via SMTP or for easier migration to another provider)

whyoh 5y ago

Just a comment: the difference between business and personal accounts is not very clear. It looks like the business account is better, but it's cheaper. Or is that price just temporary? That slow long scrolling of the pages isn't great either. I suggest making some simple comparison table/chart.

malinens 5y ago
Thanks for feedback and I agree with you. Owners of inbox.eu first wanted to market product for less technical small business people. Now we are moving away from this business model and will give more priority for custom domain e-mail. Soon we are launching new pricing page with feature list of free/premium personal mailboxes and custom domain mailboxes