3 ms·

The secret email account only for password recoveries is a great idea. Same issue cloudflare had back when they were hacked. I use Google apps for business for

The secret email account only for password recoveries is a great idea. Same issue cloudflare had back when they were hacked. I use Google apps for business for email hosting and even setup a secret email account that is used as the admin account (which can setup users and change passwords). I think most people that use google apps set up their primary email address as the admin account, but if that account gets compromised its incredibly easy to reset the password on every account on your domain.

jjb123 14y ago
And you could even add 2-factor auth to just this secret email account for added measure.
jmitcheson 14y ago
That's a good idea. This article explains more about the Cloudflare breach, if anyone's interested. http://www.smh.com.au/it-pro/security-it/attackers-hit-twofactor-weak-spot-in-google-apps-20120606-1zvdq.html http://www.smh.com.au/it-pro/security-it/attackers-hit-twofa...